Alert on failed windows login

Posted on 2011-10-17
Last Modified: 2012-05-12

Can I alert Network administrator if login to windows server (Remote or physical) fails for more than 3 times ?

Thanks !
Question by:pratz09
    LVL 2

    Expert Comment

    by:Dan Kennedy
    You could attach an event to email to the event in the windows event viewer, but you'd get it every time the login failed.  If it had to be three, you can attach a script that would count the recent login attempts instead of sending an email, then have it send the email.

    This would work with any windows server.

    Author Comment

    Thanks Dankenn ! I have Windows Server 2003. I went to Computer Management > Event Viewer and then System/Application/Security...  And when I right click on any event, I only get Refresh and Properties option. How do I attach event ? You mean like a WMI script to count number of login attempts ?

    PS - Could you please attach jpeg or gif file, I do not have photoshop.
    LVL 2

    Accepted Solution

    In that case, I think that the best way would be something like this, but I've never done it myself.

    PS- here is the image as jpg.  Also bmp should be able to be opened in MS Paint.

    Author Closing Comment

    Excellent article. I wonder if I do not search with right keywords or these pages are not rated high in search engines.

    Thanks a lot !

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
    Ever wondered why Windows 8 and 10 don't seem to accept your GPO-based software deployment while Windows 7 does? Read on.
    This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now