In a few of our clients we have working domain controlers which are not showing us Failed login events and locked accounts events. My guess is that it's something to do with the log configuration at the domain controller device. We are configured to be getting SYSTEM,APPLICATION,SECURITY logs from these DCS. Has anyone encountered such an issue before or knows how to fix this in the DC Device?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.