Enable-CMAmtAuditLog
Enable-CMAmtAuditLog
Enables audit logging for Intel AMT-based computers.
Syntax
Parameter Set: SearchByNameMandatory
Enable-CMAmtAuditLog -DeviceName <String[]> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Parameter Set: SearchByIdMandatory
Enable-CMAmtAuditLog -DeviceId <String[]> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Parameter Set: SearchByValueMandatory
Enable-CMAmtAuditLog -Device <IResultObject> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Detailed Description
The Enable-CMAmtAuditLog cmdlet enables audit logging for Intel Active Management Technology (Intel AMT)-based computers. The audit log records authorized and authenticated out-of-band management activities performed on Intel AMT computers.
You can specify computers by using the Microsoft System Center 2012 SP1 Configuration Manager device name or device ID, or you can use the Get-CMDevice cmdlet to get a device object.
Parameters
-Device<IResultObject>
Specifies a device object in Configuration Manager. To obtain a device object, use Get-CMDevice.
Aliases |
InputObject |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-DeviceId<String[]>
Specifies an array of IDs of devices.
Aliases |
ResourceId |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-DeviceName<String[]>
Specifies an array of names of devices.
Aliases |
Name |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Force
Forces the command to run without asking for user confirmation.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Confirm
Prompts you for confirmation before running the cmdlet.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
<CommonParameters>
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
Inputs
The input type is the type of the objects that you can pipe to the cmdlet.
Outputs
The output type is the type of the objects that the cmdlet emits.
Examples
Example 1: Enable audit logging for a device by using an ID
This command enables Intel AMT audit logging for a device that has the ID 16777230.
PS C:\> Enable-CMAmtAuditLog -DeviceID "16777230"
Example 2: Enable audit logging for a named device
This command enables Intel AMT audit logging for a device named Accn023.Contoso.com.
PS C:\> Enable-CMAmtAuditLog -DeviceName "Accn023.Contoso.com"
Example 3: Enable audit logging by using a variable
The first command gets a device object by using the Get-CMDevice command, and then stores it in the $CMD variable.
The second command enables Intel AMT audit logging for the device in $CMD. The command uses the Force parameter. Therefore, the command does not prompt you for confirmation.
PS C:\> $CMD = Get-CMDevice -Name "Accn023.Contoso.com"
PS C:\> Enable-CMAmtAuditLog -Device $CMD -Force