Solved

DC not showing failed logon attempts

Posted on 2014-12-15
2
160 Views
Last Modified: 2014-12-16
I have a domain controller that is 2008 R2 and I can't seem to get it to show the failed login attempts in the eventviewer.  Any suggestions on what I might be missing.   It shows the successful ones ......


Thanks .
0
Comment
Question by:jtbrown1111
2 Comments
 
LVL 6

Accepted Solution

by:
oferam earned 500 total points
ID: 40501362
Through the "Group Policy Management" you should edit the "Default Domain Controllers Policy" to include failed logon events.

Right click that policy - Choose edit... and navigate to:
Policies --> Windows settings --> Security Settings --> Local Policies --> Audit Policy

The are two relevant definitions overs there:
1) audit account logon events
2) audit logon events

Make sure those include failed as well.
0
 

Author Closing Comment

by:jtbrown1111
ID: 40503776
Thanks ....  This worked
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now