{"id":608,"date":"2014-10-10T08:29:55","date_gmt":"2014-10-10T06:29:55","guid":{"rendered":"http:\/\/dety.net.ua\/?p=608"},"modified":"2014-10-10T08:29:55","modified_gmt":"2014-10-10T06:29:55","slug":"windows-events-for-auditing-logon-issues","status":"publish","type":"post","link":"https:\/\/dety.net.ua\/?p=608","title":{"rendered":"Windows events for auditing logon issues"},"content":{"rendered":"\n\n\n\n\n\n\n\n\n\n
Event Id<\/th>\nEvent Type<\/th>\nEvent Occured<\/th>\nReason<\/th>\n<\/tr>\n
529<\/td>\nFailure Audit<\/td>\nLogon Failure<\/td>\nUnknown user name or bad Password<\/td>\n<\/tr>\n
539<\/td>\nFailure Audit<\/td>\nLogon Failure<\/td>\nThe user trying to logon is already locked<\/td>\n<\/tr>\n
612<\/td>\nPolicy Change<\/td>\nPolicy Changed<\/td>\nGeneral Audit Policy changed<\/td>\n<\/tr>\n
643<\/td>\nPolicy Change<\/td>\nDomain Policy Changed<\/td>\nChanges in Account Lockout and Password policis<\/td>\n<\/tr>\n
644<\/td>\nSuccess Audit<\/td>\nUser Account Locked Out<\/td>\nThe user account has reached the account lockout threshold<\/td>\n<\/tr>\n
671<\/td>\nSuccess Audit<\/td>\nUser Account Unlocked<\/td>\nUser Account Unlocked<\/td>\n<\/tr>\n
675<\/td>\nFailure Audit<\/td>\nLogon Failure<\/td>\nPre-authentication failed<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n\n\n\n\n\n\n\n\n\n
Event Id<\/th>\nEvent Type<\/th>\nEvent Occured<\/th>\nReason<\/th>\n<\/tr>\n
4625<\/td>\nFailure Audit<\/td>\nLogon Failure<\/td>\nUnknown user name or bad Password<\/td>\n<\/tr>\n
4719<\/td>\nPolicy Change<\/td>\nPolicy Changed<\/td>\nGeneral Audit Policy changed<\/td>\n<\/tr>\n
4739<\/td>\nPolicy Change<\/td>\nDomain Policy Changed<\/td>\nChanges in Account Lockout and Password policis<\/td>\n<\/tr>\n
4740<\/td>\nSuccess Audit<\/td>\nUser Account Locked Out<\/td>\nThe user account has reached the account lockout threshold<\/td>\n<\/tr>\n
4767<\/td>\nSuccess Audit<\/td>\nUser Account Unlocked<\/td>\nUser Account Unlocked<\/td>\n<\/tr>\n
4771<\/td>\nFailure Audit<\/td>\nLogon Failure<\/td>\nKerberos Pre-authentication failed<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"

Event Id Event Type Event Occured Reason 529 Failure Audit Logon Failure Unknown user name or bad Password 539 Failure Audit Logon Failure The user trying to logon is already locked 612 Policy Change Policy Changed General Audit Policy changed 643 Policy Change Domain Policy Changed Changes in Account Lockout and Password policis 644 Success […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13,12],"tags":[],"class_list":["post-608","post","type-post","status-publish","format-standard","hentry","category-novosti","category-windows"],"_links":{"self":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=608"}],"version-history":[{"count":1,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/608\/revisions"}],"predecessor-version":[{"id":609,"href":"https:\/\/dety.net.ua\/index.php?rest_route=\/wp\/v2\/posts\/608\/revisions\/609"}],"wp:attachment":[{"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dety.net.ua\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}