Today I installed Audit Collection Services (ACS) in my demo environment and after installing the ACS Collector and ACS Forwarder I wanted to start the AdtAdmin.exe tool. But where is AdtAdmin.exe installed?

And how do I run it next time from any location I’m in my (PowerShell) Command prompt?

AdtAdmin.exe is installed in: C:\Windows\System32\Security\AdtServer folder.

Now I knew the path I just added the path the path environment variable using Powershell.

$env:path = $env:path + ";C:\Windows\System32\Security\AdtServer"

Result:

image

Have fun Auditing your security events!

But would not it be cool to have a PowerShell wrapper around AdtAdmin.exe? Smile Anybody?