logon failed audit

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi!
I am working with the security log, but it do not have the information that
I need.
I want to know the hostname used by the user that want to connect to a
server when the user name or password is not correct (event 529)

Do you know what I have to do to obtain this information?


Thanks
 
It should give you the workstation name or possibly IP address that can
usually be tracked down by pinging it or checking your wins/dns/dhcp
records. --- Steve
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

logon failure audit 1
Security log in Event Viewer shows Failure Audits from other pcs???? 6
Audit Failures 4
Auditing User logon/logoff events. 2
Password checking is running-please help 3
680 & 529 Failure Audits 1
Event 529 and 681 5
Failure Audit Question 2

Back
Top