Solved

Windows Security Log not showing failed login attempts

Posted on 2011-09-28
2
823 Views
Last Modified: 2012-05-12
I set up an FTP server on one of my home boxes (Windows Server 2003, R2) a couple weeks ago, and I've been periodically checking the security log on the machine to determine if someone is attempting to hack into my FTP server.  Today, it occurred to me that my Security Log never shows a failure audit.  

- I tried logging onto the FTP server using a remote client with bad password, no failure audit appeared.
- I tried logging into server via Remote Desktop with bad password, no failure audit appeared.
- I tried logging onto the console with bad password, no failure audit appeared.

I've checked the configuration of the security log.  No filters are applied.  I've reset the configuration on the security log.  Still, no failure audits appear.  Suggestions?
Success-Audit.png
0
Comment
Question by:jdana
2 Comments
 
LVL 11

Accepted Solution

by:
psantiangeli earned 500 total points
Comment Utility
Hi,
you should check security policy Audit Account Logon Events for successfull and failure

you can do with gpedit.msc or via group policy
0
 

Author Closing Comment

by:jdana
Comment Utility
Thanks!
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now