Usernames are not displayed in Event ID 23 and 258

Applies To
Exchange Server 2019

Symptoms

If Remote PowerShell is disabled for a user who tries to use the feature, Event ID 23 and 258 are logged. However, the log entries don't contain the relevant usernames. This makes it impossible to relate the event to the user.

Cause

For security, Remote PowerShell was disabled for all User accounts except Admin accounts.

Resolution

Starting in Microsoft Exchange Server 2019 CU14, the username of the user who tries to establish a Remote PowerShell connection is now successfully recorded in the event log.

To fix this issue, install the following cumulative update:

Cumulative Update 14 for Exchange Server 2019 or a later cumulative update for Exchange Server 2019