Where can I view active directory failed logon attempts?
If your auditing policy is set to only log successful events, you will only get successful events. Change your auditing policy to log logon failures as well, then look at these Microsoft tools to help you troubleshoot the lockout issue.
Related videos on Youtube
![Scott Szretter](https://i.stack.imgur.com/JS71d.jpg?s=256&g=1)
Scott Szretter
As. Director or Information Technology / Developer N1VAN www.508tech.com Apache / PHP / MySQL IIS / ASP.NET / MS-SQL Flex / Flash Builder / Actionscript .NET / C# / VB / MVC JavaScript / XML / HTML / DHTML Java / Objective-C Enterprise Networking / Server & Workstation Hardware / Storage VMWARE / VEEAM
Updated on September 18, 2022Comments
-
Scott Szretter almost 2 years
I do not see any failed logon attempts in my windows sever 2003 security event log (I see only successful ones). However, I have a user that is getting locked out very often and I need to try to determine why. Is there a setting that might be hiding the failed login attempts, or a way to view these?
-
Scott Szretter almost 13 yearsAs in this? support.microsoft.com/kb/814595
-
Christopher almost 13 yearsYes, that is what you are looking to do.