Active Directory – How to Find Failed Logon Requests
So to find any failed logon requests for a user you can use one of the two following XML queries, the first just shows all successes and failures for that user. The second shows just the failures only for that user. 1. Open the event viewer, and click on the “Security” log on the left […]
More...