Knowledge Base

Account Lockouts Not Posted to Audit.Log

Article ID: 121162

Article Last Modified on 9/30/2003


APPLIES TO


This article was previously published under Q121162

SYMPTOMS

User account lockouts due to failed password logon attempts are recorded in the audit log by the Primary Domain Controller (PDC) only if the PDC has been specified as the logon server. The logon failures are registered in the audit log, but not the account lockout.

STATUS

Microsoft has confirmed this to be a problem in LAN Manager 2.2 and 2.2b. We are researching this problem and will post new information in the Microsoft Knowledge Base as it becomes available.

Additional query words: LANMAN 2.20b 2.20 NetLogon

Keywords: KB121162