Net Statistics Server.

Question

Hi everyone!

May someone share any material about permission and password violations? I would like to track the process and discover what is causing those numbers. Look:

Thanks.

Answer 1

Hi Doria,

You can audit logon failure(4625 event in Security events)

Check following for further details.
https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4625

(Don't forget to Accept as answer if this is helpful)

Answer 2

Could be hacking attempts. May need to do some network captures.

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

Could be nefarious, or could be a lot of users type in their passwords incorrectly (it happens) . You normally see these high password violation numbers on domain controllers and the file servers will have high permissions violations. Your server has both. What is the function of this particular server?

Answer 4

File server.

What tools and which OS log can I get more information?

Answer 5

Hi,
 
Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.
 
Best Regards,
Vicky