You will need to audit for failed logon attempts.
How to audit for events:
http://support.microsoft.com/kb/814595
--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.
"aconti" <> wrote in message
news:...
>
> Hello I want to see all the failed logons by users in the domain, I have
> 2 DCs, do I have to enable an audit policy on a DC or automatically I
> can just check the security log and all failed logons will be displayed
> there ?
>
> THank you
>
>
> --
> aconti
> ------------------------------------------------------------------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1268498.htm
>
> http://forums.techarena.in
>