Security Event

  • Thread starter Thread starter Krishna Kumar
  • Start date Start date
K

Krishna Kumar

I have two site and two domain controllers and 50 machine
in Each site.The Auditing has been enabled domain wide. A
user from one site tries to guess the credidentials of
the user in the other site and the account gets locked
out. Will the event log on the other domain controller
get synchronised with the event. If so how often does
that and how ( I need to be very clear on the site attack
came from ). If possible please provide links to the
articles.Thanks In Advance
 
The event will only be recorded on the domain controller that tried to
authenticate the user and will not be copied to the other domain controllers. If
these failed logons are from domain computers, the domain computer that the
failed logon originated from should be in the log. --- Steve
 
Back
Top