How can I log IP address of failed remote logons?

I have denied access to a user (disabled account). I am still seeing remote logon failures for this account in event log. I would like to ability to log the originating IP address of these remote logons in case we need to take this farther. How can I do this?
FIFBAAsked:
Who is Participating?
 
darrenakinCommented:
Go to your Event Log and look at the failed attempts, it will have the IP listed here
0
 
PowerITCommented:
A little more info please. Is this to a specific (intranet) application, to a VPN, to fileshares, terminal servers, client PC etc ...
Also: what is the architecture: firewall, operating systems, etc ... would be helpfull.

J.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.