Re: Event Viewier - Security Log - Event #: 529

From: Daniel Kristian Rhoden (Daniel@cxp.com)
Date: 04/08/03


From: "Daniel Kristian Rhoden" <Daniel@cxp.com>
Date: Mon, 7 Apr 2003 21:15:29 -0400


I wanted to add that I did (just) read a post somewhat with the same
question. But, I think Microsoft is being stupid to not have a way of just
opening a log file and at least seeing the IP Address of the person
attempting such things. It's freaking annoying. Yes, a firewall should
exist, even if it is a Web server...BUT...MS should still put some good
logging in for SECURITY! So please do respond if you know any way to force
IP Logging or a good program to log such events (that's free or very close
to free).

Thanks!

"Daniel Kristian Rhoden" <Daniel@cxp.com> wrote in message
news:O4BTuuW$CHA.1964@TK2MSFTNGP12.phx.gbl...
> Hello,
>
> I am seeing a lot of these Event #: 529's in my Security Log under
Event
> Viewer. It doesn't tell me enough information to do anything about. I have
> the date and time as well as the Username attempted, but I need to know at
> LEAST the HOST NAME and/or IP ADDRESS along with possibly the passwords
that
> they have been trying (to see if it's somebody I know, judging by the
> assumed passwords or just a dictionary attack).
>
> Is there a log file, or something to help me with this? BTW, I'm
> actually referring to Windows 2000 Server, but I need to know for XP as
> well.
>
> Thanks!
>
> PS: I looked everywhere and I can't find anybody that knows the answer to
> this question. It would be greatly appreciated to know... T.I.A.!
>
> Sincerely,
> DTM
>
> Daniel Rhoden
> Dan-o@cxp.com
>
>
>
>



Relevant Pages

  • Re: Logging components?
    ... I think Logging is pretty much individual, so that usualy everyone has their ... {Write Logged exception into the Log file? ... {Write exception with a short string description into the Global App Log ... > By logging components, I specifically DON'T MEAN components for catching ...
    (borland.public.delphi.thirdpartytools.general)
  • Re: Phantom /var full messages
    ... if you could isolate it to just snort or just MySQL. ... without restarting the program that's logging to them. ... compresses the current log file into a new file, ...
    (freebsd-questions)
  • Re: Annoying 1202 errors
    ... Enabling this logging tracks all changes and settings applied to the machine ... Name: UserEnvDebugLevel ... I recommend that you remove any existing log file and then use gpupdate ... feature GUEST. ...
    (microsoft.public.win2000.group_policy)
  • Re: Theodore Adorno, a prophet of data systems design
    ... >> Can you translate the above into English please? ... > at compile time or runtime, up to you) what level of logging you wish. ... >> a single log file from multiple threads for anyone with even a beginner's ... > Actually, I can't guarantee that it will work in a multithreaded program, ...
    (comp.programming)
  • RE: Unable to SEND faxes
    ... to verify that your modem/device is on the Microsoft Hardware Compatibility ... You could also turn on Session logging and see if that reveals any thing: ... 102,400 - Maximum size of a single log file, in bytes. ... incoming session logs folder ...
    (microsoft.public.windows.server.sbs)