Failed Logon Events Not Logging


  • Audit account logon events are currently set for Success and Failure, unfortunately, the failed login logs are no where to be found and not working ( EventID 4625 ).

    Already tried this, but it is not working:

    OS is Windows Server 2008 R2 Enterprise and joined to a domain.

    Thursday, July 16, 2015 6:52 AM


  • Meanwhile, I find an informative resource that covers the same concern in order to audit successful logon/logoff and failed logons in Active Directory :

    Hope, it might helps you.

    Thursday, July 16, 2015 7:20 AM