Setting account lockout alert

From: matt (matt_at_work.com)
Date: 08/05/03 

Date: Tue, 5 Aug 2003 11:30:32 -0700

I would like to know if it is possible for an alert to be
sent to the administrator when a users account is either
locked out or has failed logons. I have gone into
Performance Logs and Alerts and tried setting it up in
there - I followed MS step by step directions and had the
counters set to over 0 or 1 and it doesn't do what I
would like. I have used the Errors granted access and
errors access permissions and errors logon counters set.

I just basically would like an alert sent if someone tries
to logon unsuccessfully to any resource but in particular
account lockouts.

Thanks

Matt

Relevant Pages

  • Re: How to audit logons from external IPs?
    ... I think you might want to look at something like the IDS at www.snort.org ... > My idea was to use the Performance Monitor to trigger the Alert, Logon ...
    (microsoft.public.win2000.security)
  • Can I creat an Alert for another end user?
    ... I need to setup an Alert for another End user even though I logon as the ... Administrator. ... Can this be done in sharepoint. ...
    (microsoft.public.sharepoint.windowsservices)
  • how to alert password guessing
    ... I try to set an alert for server errorlogon counter> limit 10 ... clear and keep increasing when someone logon failed. ... writing to application event log once the limit reached. ...
    (microsoft.public.win2000.security)
  • Re: When I assign an Issue to someone no email is generated
    ... have them logon and click the alert me in the issues section and configure ... > I am running on WSS 2.0 ... Prev by Date: ...
    (microsoft.public.sharepoint.windowsservices)