Event log for disabled account

From: Troy Tate (ttate_nospam_at_ctscorp.com)
Date: 07/29/04 

Date: Thu, 29 Jul 2004 13:49:01 -0500

When an account is disabled or locked out due to too many attempts
with an incorrect password, is this logged to any event log (WinNT4)?
I have tested locking an account and do not see any events being
logged. I would like to use some paging software to notify me in
advance that a user account is locked out prior to being called by the
user.

Thanks for your assistance.

Relevant Pages

  • Re: Missing Some Security Events
    ... but I can't find those events on any DC event log. ... > There appear to be code paths in Windows 2000 ... >> 629 User Account Disabled ...
    (microsoft.public.win2000.security)
  • Re: Unexplained User Account Deletion
    ... event log is at the heart of the problem in light of the fact that the ... GUID' statement literally, however I am referring to the DEL: ... Category: Account Mgmt ... Target Account Name: User1 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unexplained User Account Deletion
    ... I don't believe it was the event log obviously and I am not really of the opinion it is ADUC either. ... Joe Richards Microsoft MVP Windows Server Directory Services ... Category: Account Mgmt ... Target Account Name: User1 ...
    (microsoft.public.windows.server.active_directory)
  • RE: Issue with user profile folders and outlook
    ... I have received the Event Log and had a look at it. ... the SID should be resolved to the account name. ... Try to log onto the client with that account and check how it works. ... Connections, ...
    (microsoft.public.windows.server.sbs)
  • Server Application Unavailable
    ... I'd actually likely be able to figure this out on my own if the administrator note were correct, but I can't find anything in the event log about the issue either. ... I see nothing about username/password in the processModel Section of that file, ... correctly installed and that the ACLs on the installation ... directory allow access to the configured account. ...
    (microsoft.public.dotnet.framework.aspnet)