Double-click on any event to see details of the source from where the failed logon attempts were made.To know about the failed logon events, filter the Security Event Log for Event ID 4625.Open command prompt and run the command gpupdate/force to update Group Policy.
In the Audit logon event properties, select the Security Policy Setting tab and select Success.Expand Computer Configuration>Windows Settings>Security Settings > Local Policies > Audit Policy and double-click ‘Audit logon events’.Edit domain’s Default Domain Policy in the Group Policy Management Editor.Run gpmc.msc to Configure Group Policy Audit Settings.
0 kommentar(er)
