Alerting on Failed Audits
From: Ferdie (ferdie_at_insane.com)
Date: 01/25/05
- Next message: Roger Abell: "Re: Domain trust Windows 2000 & Windows 2003 Server"
- Previous message: Research Services: "Re: IPSec to encrypt SMB traffic?"
- Next in thread: Steven L Umbach: "Re: Alerting on Failed Audits"
- Reply: Steven L Umbach: "Re: Alerting on Failed Audits"
- Reply: Roger Abell: "Re: Alerting on Failed Audits"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 24 Jan 2005 15:07:02 -0800
I would like to get alerts or reports whenever my DC's get a Failure Audit.
My goal is to identify when and why user accounts get locked out, and if
there is a hack attempt.
Is there a way to gather the logs on my DC's and reports on the failures?
I'm just looking for the easiest way for now, since we will be implementing
an environmental monitoring service later.
Thanks,
Ferdie
- Next message: Roger Abell: "Re: Domain trust Windows 2000 & Windows 2003 Server"
- Previous message: Research Services: "Re: IPSec to encrypt SMB traffic?"
- Next in thread: Steven L Umbach: "Re: Alerting on Failed Audits"
- Reply: Steven L Umbach: "Re: Alerting on Failed Audits"
- Reply: Roger Abell: "Re: Alerting on Failed Audits"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|