Автор Тема: Cannot filter by user in Event Viewer security log  (Прочитано 4207 раз)

JoeClark

  • Постоялец
  • Сообщений: 147
  • Дом: Корпус 28
Cannot filter by user in Event Viewer security log
« : 11 Ноябрь 2017, 14:33:44 »
Hii ...




I attempt to logon to OWA (Outlook Web Access or App in E2K10) and enter an incorrect password intentionally.


This creates two "Audit Failure"entries in the security log of the mail server: Event ID 4625


The entry (entries) shows up in the unfiltered log.


They show up when I filter by keyword "Audit Failure".


But when I filter by name - I'm not there.


If my name was John Smith, the user name entered was "jsmith" (without quotes).


Can anyone reproduce this?


Do I have to enter the user name differently?




Thanks ..!


For More Details:


animated explainer
« Последнее редактирование: 11 Ноябрь 2017, 14:59:19 от JoeClark »