Account Lockouts Not Posted to Audit.Log

ID: Q121162

The information in this article applies to:

Microsoft LAN Manager, versions 2.2, 2.2b

SYMPTOMS

User account lockouts due to failed password logon attempts are recorded in the audit log by the Primary Domain Controller (PDC) only if the PDC has been specified as the logon server. The logon failures are registered in the audit log, but not the account lockout.

STATUS

Microsoft has confirmed this to be a problem in LAN Manager 2.2 and 2.2b. We are researching this problem and will post new information in the Microsoft Knowledge Base as it becomes available.

Additional query words: LANMAN 2.20b 2.20 NetLogon

Keywords :
Version : :2.2,2.2b
Platform :
Issue type :