Announcement

Collapse
No announcement yet.

Terminal server failed logon attempts event logs

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Terminal server failed logon attempts event logs

    Hi guys

    I see that in my event log. there are a million or so logs stating:
    remote session from client name a exceeded the maximum allowed failed logon attempts

    I have also read that when going to the security section of the event viewer one can see from which IP
    But the security event only logged successful events and no failed attempts are showing up

    Any suggestions
    thank

  • #2
    Re: Terminal server failed logon attempts event logs

    In group policy enable logging of failures for "logon" and "account logon" events
    Increase log size first!
    Tom Jones
    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
    PhD, MSc, FIAP, MIITT
    IT Trainer / Consultant
    Ossian Ltd
    Scotland

    ** Remember to give credit where credit is due and leave reputation points where appropriate **

    Comment


    • #3
      Re: Terminal server failed logon attempts event logs

      Do you have RDP port 3389 published to the internet ?
      Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

      Comment

      Working...
      X