AXISHK
asked on
Audit account lock on Window 2003 and 2008 DC
http://community.spiceworks.com/how_to/show/11824-email-account-lock-out-notification
Follow the link to audit account lock but it doesn't work.
I have already enabled audit policy under domain password policy and Default domain controller policy to audit " account login" failure event.
We have two domain controllers, Window 2003 and Window 2008. I tried to stimulate a user login failure and find that event 4740 is not logged. Only event 675 is logged in Window 2003. This event corresponded to a stimulated login failure on a workstation.
Any idea ??
Follow the link to audit account lock but it doesn't work.
I have already enabled audit policy under domain password policy and Default domain controller policy to audit " account login" failure event.
We have two domain controllers, Window 2003 and Window 2008. I tried to stimulate a user login failure and find that event 4740 is not logged. Only event 675 is logged in Window 2003. This event corresponded to a stimulated login failure on a workstation.
Any idea ??
ASKER
HOW TO MAIL ACcount lockout on window 2003 as it does not have powershell
You need to install Windows Management framework 2.0 (PowerShell 2).
http://support.microsoft.com/kb/968929
It supports Windows Server 2003 with Service Pack 2 and higher. If you have a lower service pack level you will need to install Windows Management Framework 1.0 (PowerShell 1).
http://support.microsoft.com/kb/968929
It supports Windows Server 2003 with Service Pack 2 and higher. If you have a lower service pack level you will need to install Windows Management Framework 1.0 (PowerShell 1).
Would you be intrested in an third party application if yes please update so as to update you with this,
As this task can be easily with an third party application.
Thanks.
As this task can be easily with an third party application.
Thanks.
ASKER
Install Powershell on Window 2003 but it seems that there is no trigger event in Window 2003 schedule. Hence, not sure whether I can still use powershell to track the event.
If there is no workaround powershell solution for Window 2003, I can consider 3rd solution. Tks
If there is no workaround powershell solution for Window 2003, I can consider 3rd solution. Tks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Tks
4740 will trigger on a lockout not a bad password attempt.