Logon/lofoff,Lockout entries not in Event log

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am tracking a frequent account lockout problem.When i referred Event log, i can see no entries on account lockout (644) or even logon/logoff events. I have enabled all auditing including Account Management but still i cannot find any logs for account lockout in DC.
Can anyone help me ? How to log all user logon/logoff,lockout events in DC?

NO PROBLEM WITH AUDIT POLICY AS I HAVE ENABLED ALL POLICIES.
 
All logs are stored on the DC where the users are being authenticated. So if you have more than one DC, you would have to go onto each Event Log on each different DC to check. So, how many DC do you have

Antoni

----- Hall_Of_Fame wrote: ----

I am tracking a frequent account lockout problem.When i referred Event log, i can see no entries on account lockout (644) or even logon/logoff events. I have enabled all auditing including Account Management but still i cannot find any logs for account lockout in DC.
Can anyone help me ? How to log all user logon/logoff,lockout events in DC?

NO PROBLEM WITH AUDIT POLICY AS I HAVE ENABLED ALL POLICIES.
 
Back
Top