Also checks if the provider is registered with Get-WinEvent before un…

…registering
Sleepw4lker · Nov 13, 2024 · b8a4414 · b8a4414
1 parent 1118217
commit b8a4414
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/TameMyCerts/install.ps1 b/TameMyCerts/install.ps1
@@ -173,8 +173,8 @@ process {
         }
 
         # If EWT Logging manifest exist unregister that one.
-        If (Test-Path -Path "$BaseDirectory\$($PolicyModuleName).events.man") {
-	    Write-Verbose "Found the required files for EWT logging, unregistering with wevtutil"
+        If (((Get-WinEvent -ListProvider $PolicyModuleName -ErrorAction SilentlyContinue) -ne $Null) -and (Test-Path -Path "$BaseDirectory\$($PolicyModuleName).events.man")) {
+	        Write-Verbose "Found the required files for EWT logging, unregistering with wevtutil"
             Start-Process `
                 -FilePath "$($env:SystemRoot)\System32\wevtutil.exe" `
                 -ArgumentList "um", """$BaseDirectory\$($PolicyModuleName).events.man""" `