Solved

Windows Security Log not showing failed login attempts

Posted on 2011-09-28
2
832 Views
Last Modified: 2012-05-12
I set up an FTP server on one of my home boxes (Windows Server 2003, R2) a couple weeks ago, and I've been periodically checking the security log on the machine to determine if someone is attempting to hack into my FTP server.  Today, it occurred to me that my Security Log never shows a failure audit.  

- I tried logging onto the FTP server using a remote client with bad password, no failure audit appeared.
- I tried logging into server via Remote Desktop with bad password, no failure audit appeared.
- I tried logging onto the console with bad password, no failure audit appeared.

I've checked the configuration of the security log.  No filters are applied.  I've reset the configuration on the security log.  Still, no failure audits appear.  Suggestions?
Success-Audit.png
0
Comment
Question by:jdana
2 Comments
 
LVL 11

Accepted Solution

by:
psantiangeli earned 500 total points
ID: 36720648
Hi,
you should check security policy Audit Account Logon Events for successfull and failure

you can do with gpedit.msc or via group policy
0
 

Author Closing Comment

by:jdana
ID: 36994858
Thanks!
0

Featured Post

Use Case: Protecting a Hybrid Cloud Infrastructure

Microsoft Azure is rapidly becoming the norm in dynamic IT environments. This document describes the challenges that organizations face when protecting data in a hybrid cloud IT environment and presents a use case to demonstrate how Acronis Backup protects all data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

cPanel is a Unix based web hosting control panel that provides a graphical interface and automation tools designed to simplify the process of hosting a web site. cPanel utilizes a 3 tier structure that provides functionality for administrators, rese…
We have adopted the strategy to use Computers in Student Labs as the bulletin boards. The same target can be achieved by using a Login Notice feature in Group policy but it’s not as attractive as graphical wallpapers with message which grabs the att…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question