Link to home
Start Free TrialLog in
Avatar of pratz09
pratz09Flag for United States of America

asked on

Alert on failed windows login

Hi,

Can I alert Network administrator if login to windows server (Remote or physical) fails for more than 3 times ?

Thanks !
Avatar of Dan Kennedy
Dan Kennedy
Flag of United States of America image

You could attach an event to email to the event in the windows event viewer, but you'd get it every time the login failed.  If it had to be three, you can attach a script that would count the recent login attempts instead of sending an email, then have it send the email.

This would work with any windows server.
attach-task-to-this-event.bmp
Avatar of pratz09

ASKER

Thanks Dankenn ! I have Windows Server 2003. I went to Computer Management > Event Viewer and then System/Application/Security...  And when I right click on any event, I only get Refresh and Properties option. How do I attach event ? You mean like a WMI script to count number of login attempts ?

PS - Could you please attach jpeg or gif file, I do not have photoshop.
ASKER CERTIFIED SOLUTION
Avatar of Dan Kennedy
Dan Kennedy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of pratz09

ASKER

Excellent article. I wonder if I do not search with right keywords or these pages are not rated high in search engines.

Thanks a lot !