break in attempt

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Is there some way to tell if someone has tried to break in your system by
guessing your password? Is there a history of password attempts saved
anywhere in the system?
 
Hi Howie,

Only if you were already set to log the events. This is part of the local
security span-in (secpol.msc), and is only available in WinXP Pro. In Home
systems, this particular event may be enabled by default, I am unsure on
this point. However, if logging is enabled, you will find the history in the
event viewer (eventvwr.msc) under the security logs.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
 
Rick said:
Hi Howie,

Only if you were already set to log the events. This is part of the local
security span-in (secpol.msc), and is only available in WinXP Pro. In Home
systems, this particular event may be enabled by default, I am unsure on
this point. However, if logging is enabled, you will find the history in the
event viewer (eventvwr.msc) under the security logs.
Click to expand...

WinXP Home Ed. Bundle here.
I just /happend/ to mis-spell my password the boot after reading this. ;-)

Login (wrong password): An EventID 680,529 'Failure Audit' Pair

Login (correct password): An EventID 680,528 'Success Audit' Pair
 
Back
Top