Solved

Enable IIS Logging via GPO

Posted on 2016-07-14
4
155 Views
Last Modified: 2016-07-18
We are looking to centrally enable IIS logging on all of our web servers. We can manually enable via the below article. However, we would like a way to enable this across all of our web servers.

http://blogs.iis.net/webtopics/iis-7-5-how-to-enable-iis-configuration-auditing
0
Comment
Question by:GR JN
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 41712598
If all servers are 2008 and above, then try below
Enter all servers in txt file one by one on each line
server1
server2

Then Try below
$Allservers = get-Content C:\servers.txt
foreach ($server in $Allservers)
{
$si = new-object System.Diagnostics.ProcessStartInfo
$si.fileName = “C:\Windows\System32\wevtutil.exe”
$si.Arguments= ‘ sl Microsoft-IIS-Configuration/Operational /e:true’
$si.windowStyle = [System.Diagnostics.ProcessWindowStyle]::Hidden
$process = [System.Diagnostics.Process]::Start($si)
write-host “Enabled Configuration Auditing"
}

Taken from below link
https://blogs.technet.microsoft.com/sateesh-arveti/2011/03/10/powershell-script-to-enable-iis-configuration-auditing/
0
 

Author Comment

by:GR JN
ID: 41713330
Is it possible to do this natively via GPO (ADM/X)?
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 41713346
This is not possible with GPO best of my knowledge unless somebody write custom admx file to do that
0
 
LVL 41

Expert Comment

by:Adam Brown
ID: 41713761
Because of how these logs are enabled, GPO configuration isn't completely possible. You can deploy registry settings that will functionally enable the auditing, but the logs themselves will not work when you do this. Manually enabling configuration audit logging is currently the only real way to accomplish this goal.
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A hard and fast method for reducing Active Directory Administrators members.
There’s a movement in Information Technology (IT), and while it’s hard to define, it is gaining momentum. Some call it “stream-lined IT;” others call it “thin-model IT.”
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question