Mombu the Microsoft Forum sponsored links

Go Back   Mombu the Microsoft Forum > Microsoft > MICROSOFT OPERATIONS MANAGER (MOM) (TECHNET) > Monitor Failed Logons
User Name
Password
REGISTER NOW! Mark Forums Read

sponsored links


Reply
 
1 21st July 22:09
eugen
External User
 
Posts: 1
Default Monitor Failed Logons


I want to monitor Failed Logons. I've made an Event Rule with
provider:"Security" and the rule is looking for EventId 529. But I don't
receive any alert in MOM Console even if I made some failure logon attempts.
Thanks,
  Reply With Quote


  sponsored links


2 21st July 22:09
ryan brennanvv&r
External User
 
Posts: 1
Default Monitor Failed Logons


Are you logging those events? You need to make sure you have Audit Logon
Events turned on for both your DC's and member server. Is this turned on for
oth Group Policies?
  Reply With Quote
3 21st July 22:10
eugen
External User
 
Posts: 1
Default Monitor Failed Logons


I saw these events in Security Log on all servers... and I have a lot of
servers, so I need something to saw alerts when these security events occur.
  Reply With Quote
4 21st July 22:10
ryan brennanvv&r
External User
 
Posts: 1
Default Monitor Failed Logons


Hi Eugen,

As long as you have the rule setup correctly and the rule groups associated
with the right computers it should start collecting. Strange, can you give me
details on the rules you have setup.

I am not sure how comprehensive of a compliance solution you are looking
for, but http://www.securevantage.com has a complete MP for security
auditing,reporting for compliance. You can download the free trial and be up
in running shortly for all your needs and much more.

-ryan
  Reply With Quote
5 21st July 22:11
pete zerger
External User
 
Posts: 1
Default Monitor Failed Logons


Hello Eugen,

Robert Smit put a homegrown base Security MP together that may offer some
helpful examples for you.
There's a link to the download here: http://www.momresources.org/downloads-managementpacks.shtml


Regards,


Pete Zerger, MCSE(Messaging)
Co-founder and Webmaster, MOMResources.org
URL:http://www.momresources.org
BLOG: http://www.it-jedi.net/
mailtoete.zerger@gmail.com

....or find me in the forums at http://momcommunity.com

E> I saw these events in Security Log on all servers... and I have a lot
E> of servers, so I need something to saw alerts when these security
E> events occur.
E>
  Reply With Quote


  sponsored links


Reply


Thread Tools
Display Modes




Copyright 2006 SmartyDevil.com - Dies Mies Jeschet Boenedoesef Douvema Enitemaus -
666