8 lines
584 B
PowerShell
8 lines
584 B
PowerShell
$auditPolicyRuleRef = $wsmanConnectionObject.NewReference("SELECT * FROM AMT_AuditPolicyRule WHERE PolicyRuleName='Audit Policy Rule'")
|
|
$inputObject = $auditPolicyRuleRef.CreateMethodInput("SetAuditPolicy")
|
|
$inputObject.SetProperty("Enable", "true")
|
|
$inputObject.SetProperty("AuditedAppID", "16") # '16' = Security Admin Events
|
|
$inputObject.SetProperty("EventID", "0") # '0' = Intel AMT Setup and Configuration Started
|
|
$inputObject.SetProperty("PolicyType", "0")
|
|
$outputObject = $auditPolicyRuleRef.InvokeMethod($inputObject)
|
|
$returnValue = $outputObject.GetProperty("ReturnValue") |