Skip to content

Commit d98b070

Browse files
Merge branch 'main' into patch-97
2 parents f6290d2 + 30ea365 commit d98b070

File tree

1 file changed

+6
-2
lines changed

1 file changed

+6
-2
lines changed

defender-for-identity/deploy/configure-windows-event-collection.md

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Configure audit policies for Windows event logs | Microsoft Defender for Identity
33
description: This article describes how to configure audit policies for Windows event logs as part of deploying a Microsoft Defender for Identity sensor.
4-
ms.date: 06/04/2025
4+
ms.date: 11/05/2025
55
ms.topic: how-to
66
ms.reviewer: rlitinsky
77
---
@@ -23,9 +23,13 @@ Defender for Identity generates health issues for each of these scenarios if the
2323
Before you start creating new event and audit policies, we recommend that you run the following PowerShell command to generate a report of your current domain configurations:
2424

2525
```powershell
26-
New-MDIConfigurationReport [-Path] <String> [-Mode] <String> [-OpenHtmlReport]
26+
New-MDIConfigurationReport -Path "C:\Reports" -Mode Domain -Identity "DOMAIN\ServiceAccountName" -OpenHtmlReport
2727
```
2828

29+
> [!NOTE]
30+
> When using `-Mode Domain`, include the `-Identity` parameter to avoid an interactive prompt.
31+
> For more information, see: [New-MDIConfigurationReport](/powershell/module/defenderforidentity/new-mdiconfigurationreport?view=defenderforidentity-latest&preserve-view=true).
32+
2933
In the preceding command:
3034

3135
- `Path` specifies the path to save the reports to.

0 commit comments

Comments
 (0)