Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 187
  • Last Modified:

How can I log IP address of failed remote logons?

I have denied access to a user (disabled account). I am still seeing remote logon failures for this account in event log. I would like to ability to log the originating IP address of these remote logons in case we need to take this farther. How can I do this?
0
FIFBA
Asked:
FIFBA
1 Solution
 
PowerITCommented:
A little more info please. Is this to a specific (intranet) application, to a VPN, to fileshares, terminal servers, client PC etc ...
Also: what is the architecture: firewall, operating systems, etc ... would be helpfull.

J.
0
 
darrenakinCommented:
Go to your Event Log and look at the failed attempts, it will have the IP listed here
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now