?
Solved

Windows Security Log not showing failed login attempts

Posted on 2011-09-28
2
Medium Priority
?
846 Views
Last Modified: 2012-05-12
I set up an FTP server on one of my home boxes (Windows Server 2003, R2) a couple weeks ago, and I've been periodically checking the security log on the machine to determine if someone is attempting to hack into my FTP server.  Today, it occurred to me that my Security Log never shows a failure audit.  

- I tried logging onto the FTP server using a remote client with bad password, no failure audit appeared.
- I tried logging into server via Remote Desktop with bad password, no failure audit appeared.
- I tried logging onto the console with bad password, no failure audit appeared.

I've checked the configuration of the security log.  No filters are applied.  I've reset the configuration on the security log.  Still, no failure audits appear.  Suggestions?
Success-Audit.png
0
Comment
Question by:jdana
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 11

Accepted Solution

by:
Paolo Santiangeli earned 2000 total points
ID: 36720648
Hi,
you should check security policy Audit Account Logon Events for successfull and failure

you can do with gpedit.msc or via group policy
0
 

Author Closing Comment

by:jdana
ID: 36994858
Thanks!
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question