Logon/lofoff,Lockout entries not in Event log

G

Guest

I am tracking a frequent account lockout problem.When i referred Event log, i can see no entries on account lockout (644) or even logon/logoff events. I have enabled all auditing including Account Management but still i cannot find any logs for account lockout in DC.
Can anyone help me ? How to log all user logon/logoff,lockout events in DC?

NO PROBLEM WITH AUDIT POLICY AS I HAVE ENABLED ALL POLICIES.
 
G

Guest

All logs are stored on the DC where the users are being authenticated. So if you have more than one DC, you would have to go onto each Event Log on each different DC to check. So, how many DC do you have

Antoni

----- Hall_Of_Fame wrote: ----

I am tracking a frequent account lockout problem.When i referred Event log, i can see no entries on account lockout (644) or even logon/logoff events. I have enabled all auditing including Account Management but still i cannot find any logs for account lockout in DC.
Can anyone help me ? How to log all user logon/logoff,lockout events in DC?

NO PROBLEM WITH AUDIT POLICY AS I HAVE ENABLED ALL POLICIES.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Account Lockout Troubleshooting 3
Question on Account Lockout - Urgent 2
Win2000 AD user account mass lockout - Strange ! 1
Problem with Lockout Accounts 3
Account Lockout policy problem 1
Excessive Logon Failures 1
Users in Win98 workstations having account locked in Active Direct 5
Password lockout policy not effective 2

Top