- break in attempt
- Posted by HowieB on March 29th, 2006
Is there some way to tell if someone has tried to break in your system by
guessing your password? Is there a history of password attempts saved
anywhere in the system?
- Posted by Rick \Nutcase\ Rogers on March 29th, 2006
Hi Howie,
Only if you were already set to log the events. This is part of the local
security span-in (secpol.msc), and is only available in WinXP Pro. In Home
systems, this particular event may be enabled by default, I am unsure on
this point. However, if logging is enabled, you will find the history in the
event viewer (eventvwr.msc) under the security logs.
--
Best of Luck,
Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
"HowieB" <HowieB@discussions.microsoft.com> wrote in message
news:BCF17B36-EC62-452F-BCB7-415B341A4BF3@microsoft.com...
- Posted by Bob I on March 29th, 2006
Dust your keyboard for fingerprints?
HowieB wrote:
- Posted by ... et al. on March 31st, 2006
Rick "Nutcase" Rogers wrote:
WinXP Home Ed. Bundle here.
I just /happend/ to mis-spell my password the boot after reading this. ;-)
Login (wrong password): An EventID 680,529 'Failure Audit' Pair
Login (correct password): An EventID 680,528 'Success Audit' Pair
--
Nah-ah. I'm staying out of this. ... Now, here's my opinion.
Please followup in the newsgroup.
E-mail address is invalid due to spam-control.