Missing Event ID 4625
We've found we haven't been logging Event ID 4625 so we had some assistance from support to remove that event from the 'audexcluderules' table in the database but I am no longer seeing filters for those events in Configuration | Advanced Configurations | Logon Failure Events. I am pretty certain those used to be there but aren't any more.
Could someone provide the default values for the various filters necessary to properly log 4625?
Topic Participants
gary
Bruce McClane
New to M365 Manager Plus?
New to M365 Manager Plus?
New to RecoveryManager Plus?
New to RecoveryManager Plus?
New to Exchange Reporter Plus?
New to Exchange Reporter Plus?
New to SharePoint Manager Plus?
New to SharePoint Manager Plus?
New to ADManager Plus?