Perfmon Counter Logs

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

ok. i have a counter set up on my pc set to monitor incorrect logins. running for 370 days. but i have no idea how to check the damn log. anyone got any ideas?

Fergal
EDIT: i also dont think i have it set up right. i want it to show all incorrect logon attempts at this computer, can anyone tell me how to do it?
Thanks

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

You'll presumably have set up auditing for this, Fergal. You'll then check the Event Viewer in Computer Management (or set up a custom MMC).

Those are just sketchy details at the mo, m8 - the guys will give you more info soon

EDIT: Make sure you select "audit failed logon attempts" or whatever it is...

 

auditing?

wherewould that be jak?

 

Like I said, Fergal, I'm more than a wee bit vague on this, as I haven't looked at it for a while, but I'm sure the A+ touches on it (could be wrong). Look and see if there's anything in the book about it.


Failing that, I'll have a look when I get home tonight.

 

If you go into control panel then administrative tools then Local Security Policy, expand local polices then click audit polices. In the right hand window double click audit account logon events and you need to make sure that the check box for failure is on.

To see the output of this open the event viewer from within the administrative tools from before and look under security.

 

ok. bearing in mind im using xp home, i dont think the local security policy is in place, that said, the event viewer is logging successful and unsuccessful logon attempts.
but the counter still doesnt show it - or maybe i just dont understand how to access the log to read!

Fergal

 

Cant help with XP home I'm afraid, the above is for XP pro. Sorry.

 

Unless I'm mistaken, Fergal, the counter doesn't show them - it just records the data, and presents it for the Event Viewer to display, as described above.


So basically, if you are seeing all successful and failed logon attempts, then thats it, aint it ?

 

no im pretty sure it was already doing it before the counter. when i click on the counter i can save the settings to an html file. which views like perfmon. so thats probably it to be honest.

never mind i spose. thanks for the help guys

Fergal