How to fetch GPO logs displayed in Event viewer using WMI

  • Thread starter Thread starter Lucas.Alvarez.Lacasa
  • Start date Start date
L

Lucas.Alvarez.Lacasa

Guest
Hello everybody!.

Can anybody tell me which is the WMI query that I need to execute to retrieve the set of GPO logs being displayed in Event Viewer under "Application and Services Logs/Microsoft/Windows/GroupPolicy/Operational"?

I cannot find a single thread opened with this information, and I need to find a way to recover these logs using a WMI query.

I have tried with this query: SELECT * from Win32_NTLogEvent WHERE SourceName = 'Microsoft-Windows-GroupPolicy'

However I'm only retrieving 2 rows, while I have 1,228 logs in the Operational section of the Event Viewer.


Any help would be strongly appreciated.

Thank you all!.

Continue reading...
 
Back
Top