Re: Security Event

From: Steven Umbach (n9zrou_at_nscomcast.com)
Date: 11/29/03


Date: Sat, 29 Nov 2003 02:18:52 GMT

The event will only be recorded on the domain controller that tried to
authenticate the user and will not be copied to the other domain controllers. If
these failed logons are from domain computers, the domain computer that the
failed logon originated from should be in the log. --- Steve

"Krishna Kumar" <anonymous@discussions.microsoft.com> wrote in message
news:01d501c3b5eb$dc9f1120$a401280a@phx.gbl...
> I have two site and two domain controllers and 50 machine
> in Each site.The Auditing has been enabled domain wide. A
> user from one site tries to guess the credidentials of
> the user in the other site and the account gets locked
> out. Will the event log on the other domain controller
> get synchronised with the event. If so how often does
> that and how ( I need to be very clear on the site attack
> came from ). If possible please provide links to the
> articles.Thanks In Advance



Relevant Pages

  • Re: Active directory problem
    ... The root domain controller is taking much longer time to ... The event log on root domain controller is showing ... so there is no replication going on to ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows Updates and Time
    ... There are no other errors in the event log for ... "Meinolf Weber" wrote: ... You said you checked only the Domain controller policy, ... Automatic Updates under System properties is completely grayed ...
    (microsoft.public.windows.server.general)
  • Re: Two accounts getting locked out
    ... I am seeing some event ID 1083's in the event log which says the foillowing. ... During Active Directory replication, you may receive the following warning ... 214678 How to modify the default intra-site domain controller replication ... >>> Accelerated MCSE ...
    (microsoft.public.win2000.networking)
  • Re: LDAP Operations Event ID: 8270
    ... Please post the entire event log message. ... > messages so that I can stop receiving these LDAP error messages? ... >> The event log on my Exchange 2003 SP1 server has started logging No Such ... >> noticed the errors after having deleted the domain controller. ...
    (microsoft.public.exchange.admin)
  • RE: Domain controller error in event log
    ... The cause is that neither Outlook Express nor ... > | Subject: RE: Domain controller error in event log ... NTDS Inter-site Messaging ...
    (microsoft.public.windows.server.active_directory)