Solved

DC not showing failed logon attempts

Posted on 2014-12-15
2
169 Views
Last Modified: 2014-12-16
I have a domain controller that is 2008 R2 and I can't seem to get it to show the failed login attempts in the eventviewer.  Any suggestions on what I might be missing.   It shows the successful ones ......


Thanks .
0
Comment
Question by:jtbrown1111
2 Comments
 
LVL 6

Accepted Solution

by:
oferam earned 500 total points
ID: 40501362
Through the "Group Policy Management" you should edit the "Default Domain Controllers Policy" to include failed logon events.

Right click that policy - Choose edit... and navigate to:
Policies --> Windows settings --> Security Settings --> Local Policies --> Audit Policy

The are two relevant definitions overs there:
1) audit account logon events
2) audit logon events

Make sure those include failed as well.
0
 

Author Closing Comment

by:jtbrown1111
ID: 40503776
Thanks ....  This worked
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question