We have AD SelfService plus which is internet facing. So we want the ability to audit repeated failed verfication or login attempts and send an email to a support group if a potential intruder is trying to access multiple times. Does anyone know if this is possible? I have seen the built in reports which can be emailed daily, but I was hoping to have a solution that operates more real time. We have software that can monitor OS changes, so if I could get AD SelfService to make changes to a file or log something in event viewer I could generate an alert based on this.

Thanks in advance.

Barney