Disable-CMAmtAuditLog
Disable-CMAmtAuditLog
Disables audit logging for Intel AMT-based computers.
Syntax
Parameter Set: SearchByNameMandatory
Disable-CMAmtAuditLog -DeviceName <String[]> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Parameter Set: SearchByIdMandatory
Disable-CMAmtAuditLog -DeviceId <String[]> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Parameter Set: SearchByValueMandatory
Disable-CMAmtAuditLog -Device <IResultObject> [-Force] [-Confirm] [-WhatIf] [ <CommonParameters>]
Detailed Description
The Disable-CMAmtAuditLog cmdlet disables audit logging for Intel Active Management Technology (Intel AMT)-based computers. The audit log records authorized and authenticated out-of-band management activities performed on Intel AMT computers.
You can specify computers by using the Microsoft System Center 2012 Configuration Manager device name or device ID, or you can use the Get-CMDevice cmdlet to get a device object. If you want to delete the current log entries, use the Clear-CMAmtAuditlog cmdlet.
Parameters
-Device<IResultObject>
Specifies a device object. To obtain a device object, use the Get-CMDevice cmdlet.
Aliases |
InputObject |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-DeviceId<String[]>
Specifies an array of IDs of devices.
Aliases |
ResourceId |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-DeviceName<String[]>
Specifies an array of names of devices.
Aliases |
Name |
Required? |
true |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Force
Performs the action without a confirmation message.
Aliases |
none |
Required? |
false |
Position? |
named |
Default Value |
none |
Accept Pipeline Input? |
True (ByPropertyName) |
Accept Wildcard Characters? |
false |
-Confirm
Prompts you for confirmation before running the cmdlet.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
-WhatIf
Shows what would happen if the cmdlet runs. The cmdlet is not run.
Required? |
false |
Position? |
named |
Default Value |
false |
Accept Pipeline Input? |
false |
Accept Wildcard Characters? |
false |
<CommonParameters>
This cmdlet supports the common parameters: -Verbose, -Debug, -ErrorAction, -ErrorVariable, -OutBuffer, and -OutVariable. For more information, see about_CommonParameters (https://go.microsoft.com/fwlink/p/?LinkID=113216).
Inputs
The input type is the type of the objects that you can pipe to the cmdlet.
Outputs
The output type is the type of the objects that the cmdlet emits.
Examples
Example 1: Disable audit logging for a device by using an ID
This command disables Intel AMT audit logging for a device that has the ID 16777230.
PS C:\> Disable-CMAmtAuditLog -DeviceID "16777230"
Example 2: Disable audit logging for named device
This command disables Intel AMT audit logging for a device named Accn023.Contoso.com.
PS C:\> Disable-CMAmtAuditLog -DeviceName "Accn023.Contoso.com"
Example 3: Enable Disable audit logging by using a variableDisable
This example disables Intel AMT audit logging for a device named Accn023.Contoso.com.
The first command gets a device object by using the Get-CMDevice command, and stores it in the $CMD variable.
The second command disables Intel AMT audit logging for the device stored in the $CMD variable. The command uses the Force parameter. Therefore, it does not prompt you for confirmation.
PS C:\> $cm = Get-CMDevice -Name "Accn023.Contoso.com"
PS C:\>Disable-CMAmtAuditLog -Device $cm