Powershell命令查找注册表项高级审核设置（权限）

Question

I am trying to use powershell commands to get the registry key advanced audit settings, after a while of testing I have managed to come to this point:

(Get-Acl -Path HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion).AuditToString

Using that command gives me no output (advanced audit settings are in place so I am expecting an output). It seems like I am very close with this command and I may be missing a parameter. I have been at this for a while with no luck so I really appreciate any help.

Answer 1

Let's assume you have an element "AdvancedAudit" at HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion"

This is how you access it...Hope it helps!

(Get-ItemProperty -Path  HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion).AdvancedAudit