Results 1 to 2 of 2
  1. #1
    Join Date
    May 2004

    Unanswered: Trace Login Failures


    We have enabled "log logon failure" configuration parameter for our server.

    On login failure we get a message like :

    00:00000:00063:2005/01/31 11:25:05.08 Logon Login failed. User: xyz

    Is there anyway to track the machine / hostname / IP address / application or any other details about this failed login ?


  2. #2
    Join Date
    Aug 2004
    I'm pretty sure that you'll have to install and enable auditing within the server if you need this info. Once auditing is configured you can log failed logins, and this captures IP addresses/hostnames. I'm not sure about the app name without looking it up, but I would have thought that it does, as long as it's passed by the app.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts