Forum

Ultimate Windows Security Forum » Security Log » 644 - User Account Locked Out » Details of User ID Locked Out in particular...

Details of User ID Locked Out in particular... Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
nageshlad
Posted 4/28/2010 10:36:35 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 5/8/2010 11:24:53 PM
Posts: 1, Visits: 4
Hi All,

I want to identify which User ID got locked out during any given time frame. I am getting lots of events for Event ID 539 but not able to decide when any particular User ID got locked out very first time.

Also need to help to understand difference between Event ID 539 & 644.

Looking for help. Thanks in advanced.

Thanks & Regards,
Nagesh Lad
Post #367
RandyFranklinSmith
Posted 5/4/2010 7:21:27 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 324, Visits: 0
use 644.

539 just means another logon attempt after account has already been locked out

644 is the actual event of the account getting locked out

Post #374
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 11:31am