- Joined: 1/18/2017
Not tracking account lockouts
Wednesday, January 18, 2017 4:21 PM
I am still relatively new to Events Manager, but we have been having the issue of Events Manager not tracking when users get locked out of the network. We have configured our Domain Controller to audit these events and I thought I set up Events manager to properly monitor Event ID 4740, 644, and 12294 to no avail. The only notification we get at some points through the week are whenever Languard locks out a domain admin account during scanning. Each time a user calls and explains they got locked out I check and see that nothing was reported.