Re: Failed Login Event Question
From: Ben Smith [MS] (bensmi@microsoft.com)
Date: 08/05/02
- Next message: Elliot Gingold: "Updates - what do you trust?"
- Previous message: Ben Smith [MS]: "Re: using EVERYONE FULL on ADMIN$ shares -GOOD or BAD ?"
- In reply to: Eric: "Failed Login Event Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Ben Smith [MS] <bensmi@microsoft.com> Date: Sun, 4 Aug 2002 23:58:53 -0700
In article <0b5b01c23c32$45ec9880$19ef2ecf@tkmsftngxa01>, Eric
(hastingsej@yahoo.com) writes...
> How do I get my Windows Domain Controllers to write an
> event log every time someone fails to login?
> I have logging turned on but it seems like the only place
> I can track failed logins is on the computer where the
> login was attempted.
Enable Account Logon events in addition to Logon events.
>
> Also if I try to login locally to the server and it fails
> then a log is created in the security event log.
>
> It is really not practical to search the event logs on all
> the computer on my network.
>
> If I can't get them logged on the Domain Controller is
> there a way to launch a script when this event takes place?
>
> Any help would be great, thanks
>
>
-- Ben Smith Microsoft Training and Certification Are you secure? http://www.microsoft.com/security This posting is provided “AS IS” with no warranties, and confers no rights.
- Next message: Elliot Gingold: "Updates - what do you trust?"
- Previous message: Ben Smith [MS]: "Re: using EVERYONE FULL on ADMIN$ shares -GOOD or BAD ?"
- In reply to: Eric: "Failed Login Event Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
