Share via

ADFS successful login doesn't show in the event viewer

HK G 516 Reputation points
2020-04-20T18:56:39.753+00:00

I enabled the ADFS log according the doc https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-logging.

I can see the failed login but the successful login doesn't show in the event viewer. Any idea why this happens? I did confirm the Audit Application generated has both failure\successful selected in the local security policy.

Thanks

Microsoft Security | Active Directory Federation Services
Accepted answer
  1. Pierre Audonnet - MSFT 10,191 Reputation points Microsoft Employee
    2020-04-21T12:27:05.257+00:00

    Those are event if the AD FS Admin log. Audit events will be in the Security log.

    2 people found this answer helpful.

3 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. HK G 516 Reputation points
    2020-04-20T23:44:56.947+00:00

    I got the event ID 364\1000\342.

    Thanks

    0 comments
  2. ppinero 1 Reputation point
    2020-05-06T11:42:16.89+00:00

    Hi,

    I have the same problem.... i confirm that I have enable both audits for succes and failed logins but i do not see success logins....

    0 comments
  3. ppinero 1 Reputation point
    2020-05-06T11:43:34.667+00:00

    I have the same problem... i am not able to view the success login .... how did you achieve it?.

    Thank you in advance.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.