Authentication logs

Question

Hello,

i implemented a test environment Office 365 with pass-through authentication on on-premises server. It works perfect!

Where can i see the authentication logs on my on-premises server? I tried to look in Event Viewer - there aren't any logs about authentication of user.

Answer 1

Hi one more microsoft account,

Sorry for the late reply.

After doing some test and research, I found we cannot find the user authentications log. In this situation, I welcome and encourage you to share your ideas via the link: https://feedback.azure.com/forums/169401-azure-active-directory/category/160611-directory-synchronization-aad-connect. Many features of current programs have been designed and upgraded based on customers’ feedback.

Thanks,

Chris

Answer 2

Hi one more microsoft account,

Thanks for the clarification. I need to do some test regarding this issue. Once I get any update, I will post back.

Thanks,

Chris

Answer 3

Hi Chris,

Unfortunately, I did not find there the answer about my question: where can i find logs about user authentications (success or fail)?

Now my user can login in Office 365 using the Pass-through authentication. I would like to know where his login was registered in the local server?

Example:

when user logs in his own computer, then log registers an event #4769 on DC in Security.

when user logs in the Office 365, where is this logon registering?

Answer 4

Hi one more microsoft account,

You can check Event Log of the connector machine under Application and Service Logs\Microsoft\AadApplicationProxy\Connector\Admin.

For information about troubleshooting Pass-through authentication, you can refer to the following article:

https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-pass-through-authentication

Let me know if it doesn’t meet your requirement.

Thanks,

Chris