Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
13,703 questions
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi all, I am encountering a problem that I cannot seem to find the answer for. I have a user that attempted a remote desktop logon to another server and failed the login with a wrong password. He only attempted this action once. However, on windows event logs, there were 3 log entries with event ID 4625 (failed login) generated for this particular 1 attempt. Each of these log entries have different logon types (2 & 11). I cannot figure out why 3 log entries were generated for 1 failed attempt. Any help is appreciated. Thank you!