Hello, We have a service account that blocked continously but we unknow what
server and service have this acount.
How I config the audit in domain to look this server and service?

Thanks.

Hello David,

Enable Auditing on domain controllers policy for logons: "Audit account logon
events" and "Audit logon events"

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello, We have a service account that blocked continously but we
> unknow what
> server and service have this acount.
> How I config the audit in domain to look this server and service?
> Thanks.
>

hello Meinolf, Enable it´s, audit logons in member servers.

Thanks.

"Meinolf Weber" wrote:

> Hello David,
>
> Enable Auditing on domain controllers policy for logons: "Audit account logon
> events" and "Audit logon events"
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello, We have a service account that blocked continously but we
> > unknow what
> > server and service have this acount.
> > How I config the audit in domain to look this server and service?
> > Thanks.
> >
>
>
>