Hii ...
I attempt to logon to OWA (Outlook Web Access or App in E2K10) and enter an incorrect password intentionally.
This creates two "Audit Failure"entries in the security log of the mail server: Event ID 4625
The entry (entries) shows up in the unfiltered log.
They show up when I filter by keyword "Audit Failure".
But when I filter by name - I'm not there.
If my name was John Smith, the user name entered was "jsmith" (without quotes).
Can anyone reproduce this?
Do I have to enter the user name differently?
Thanks ..!
For More Details:
animated explainer