Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Powershell logs exposing passwords

Two of my APEs ran out of disk space due to a high number of text files in C:\windows\logs\powershell folders.

Trying to determine what are these files, I noticed the following section exposing an account and its password which I'm deleting for obvious security reasons and highlighting below.

### Prepare Remote PowerShell session for configuration Microsoft.PowerShell ###

$ip = 'MainPollingEngineIPAddress'
$login = 'MyAccount'
$password = 'MyAccountPassword'
$uri = 'https://MainPollingEngineIPAddress:5986/wsman/'
$uriTemplate = ''
$configurationName = 'Microsoft.PowerShell'
$retryConnectUsingFdqn = $False
$macroMissingWindowsCredentials = 'IisPowerShellMissingWindowsCredentials'
$macroUnableConnect = 'IisUnableConnectWinRmWindows'
$macroSessionsDepleted = 'IisSessionsDepletedWinRmWindows'
$macroSessionClosed = 'IisSessionClosedWinRmWindows'

Not sure what are these files for, but this information definitely should not be included it.

As a temporary work around I'm deleting the content using "rmdir /s /q C:\Windows\Logs\PowerShell\"

@aLTeReGo

[View:/cfs-file/__key/telligent-ideas/3b5487b7-6c7f-4048-a7ae-9f494d96cf68/PowerShell_5F00_transcript.S0144194._5F00_3qS4F_5F00_G.20210830080957.zip:640:480]