We just installed Windows Azure (was PhoneFator) and integrated it with Windows 2003 Active Directory. We succeeded in enabling 2-stage SMS text-based authentication with Azure (yay!). I used to be able to see all AD login rejections in RRAS logs but that is no longer occurring.
I can see 2-stage auth failures in the Azure logs for actual user failures that are configured with 2 stage authentication. I can see non-user (fake names like 'abc') attempts logged there as well.
What I cannot see in any log is when a user that is *not* configured to use 2 stage authentication has a failed login attempt.
Does anyone know where that log entry might be found?