OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Secuirty-Log Event-ID 528
From: Forrester, Mike (mforresterHSACORP.NET)
Date: Wed Jun 14 2000 - 11:27:54 CDT

Here's a doc that describes some of the strange events that happen in the
security log:

http://www.heysoft.de/nt/eventlog/faqa.htm#A9

Mike Forrester - Systems Security Engineer
High Speed Access Corp. - Denver, CO USA
mforresterhsacorp.net - +1 303 256 2134

> -----Original Message-----
> From: Simon Züst [mailto:simon.zuestAGI.CH]
> Sent: Tuesday, June 13, 2000 3:56 AM
> To: FOCUS-MSSECURITYFOCUS.COM
> Subject: Secuirty-Log Event-ID 528
>
>
> If an user try to log on a NT domain and types a bad
> password, these event
> (Event-ID 528
> unknown user name or bad password) will not be logged in the
> security-log of the
> PDC. These
> event will only be logged in the security-log of the Client.
> Is there a way to
> show these event
> also in the security-log of the PDC?
>
> Thanks
>
> Simon Züst
>