From 9233d1f57e86e4442938095cc3c5d72d2de9dd21 Mon Sep 17 00:00:00 2001 From: Steve Burkett Date: Tue, 25 Aug 2020 09:46:40 +1200 Subject: [PATCH] Update troubleshoot-bitlocker.md : Correct Event Source names Correct the event source names from TCM -> TPM (typo?) Minor formatting correction --- .../bitlocker/troubleshoot-bitlocker.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md b/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md index 88e28e59eb..bf97db1389 100644 --- a/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md +++ b/windows/security/information-protection/bitlocker/troubleshoot-bitlocker.md @@ -27,11 +27,11 @@ Open Event Viewer and review the following logs under Applications and Services - Microsoft-Windows-BitLocker/BitLocker Operational - Microsoft-Windows-BitLocker/BitLocker Management -- **BitLocker-DrivePreparationTool**. Review the Admin log, the **Operational log, and any other logs that are generated in this folder. The default logs have the following unique names: +- **BitLocker-DrivePreparationTool**. Review the Admin log, the Operational log, and any other logs that are generated in this folder. The default logs have the following unique names: - Microsoft-Windows-BitLocker-DrivePreparationTool/Operational - Microsoft-Windows-BitLocker-DrivePreparationTool/Admin -Additionally, review the Windows logs\\System log for events that were produced by the TCM and TCM-WMI event sources. +Additionally, review the Windows logs\\System log for events that were produced by the TPM and TPM-WMI event sources. To filter and display or export logs, you can use the [wevtutil.exe](https://docs.microsoft.com/windows-server/administration/windows-commands/wevtutil) command-line tool or the [Get-WinEvent](https://docs.microsoft.com/powershell/module/microsoft.powershell.diagnostics/get-winevent?view=powershell-6) cmdlet.