1

Discrepancy between Event Log taken from Powershell and with Event Log Viewer

view story
linux-howto

http://serverfault.com – Domain Controller OS - Window Server 2008 R2 Please see the First PrintScreen attached (Powershell.png). with the help of Powershell command I am trying to check the event Log of my DC. Please note the Red Rectangle Colour Box. Failure Reason: %%2313 " But the same log if i check from Event Viewer ( Second Print-Screen Attached - EventViewer.png ) the same Event ID, here it Clearly shows the "Failure Reason: Unknown user name or bad Password" Why with Powershell the same event id shows Failure reason with some syntax and in Event Viewer log of windows, it display correct? (HowTos)