How to set up an email alert for exceeding X number of failed login attempts within a given time period?
I am looking to get an email alert when there have been too many failed logon attempts on any given account.
For example, occasionally a server has a service that logs in as Administrator, and it will attempt to login a few hundred times in a matter of minutes. Because of this I can't turn on the lock-out policy for the Administrator account. But I'd like to receive a notification immediately after this happens.
Can I get an email alert after "Administrator" has over 100 failed login attempts within 10 minutes?
For example, occasionally a server has a service that logs in as Administrator, and it will attempt to login a few hundred times in a matter of minutes. Because of this I can't turn on the lock-out policy for the Administrator account. But I'd like to receive a notification immediately after this happens.
Can I get an email alert after "Administrator" has over 100 failed login attempts within 10 minutes?
Topic Participants
Guna P
Ralph van Houtem
Bruce McClane
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?