Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2016.
You have an organizational unit (OU) named Administration that contains the computer account of Server1.
You import the Active Directory module to Server1.
You create a Group Policy object (GPO) named GPO1. You link GPO1 to the Administration OU.
You need to log an event each time an Active Directory cmdlet executed successfully from Server1.
What should you do?
A.
From Advanced Audit Policy in GPO1. configure auditing for other privilege use events.
B.
Run the Add-NetEventProvider -Name “Microsoft-Active-Directory” -MatchAnyKeyword PowerShell
command.
C.
From Advanced Audit Policy in GPO1, configure auditing for directory service changes.
D.
From Administrative Templates in GPO1, configure a Windows PowerShell policy.
Explanation:
In the following GPO location, you can enable the setting “Turn on Module Logging” to record an event each
time the PowerShell executes a cmdlet of a specific
PowerShell module, for example “ActiveDirectory”.
“Computer Configuration\\Administrative Templates\\Windows Components\\Windows PowerShell”