Link to home
Start Free TrialLog in
Avatar of FIFBA
FIFBA

asked on

How can I log IP address of failed remote logons?

I have denied access to a user (disabled account). I am still seeing remote logon failures for this account in event log. I would like to ability to log the originating IP address of these remote logons in case we need to take this farther. How can I do this?
Avatar of PowerIT
PowerIT
Flag of Belgium image

A little more info please. Is this to a specific (intranet) application, to a VPN, to fileshares, terminal servers, client PC etc ...
Also: what is the architecture: firewall, operating systems, etc ... would be helpfull.

J.
ASKER CERTIFIED SOLUTION
Avatar of darrenakin
darrenakin

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial