I have one remote user whose account keeps being locked out, perhaps by some misconfigured auto-logon process, maybe related to a POP3 account on one of the PCs he uses, but as yet undetermined. But the bad logons don't show up on the Exchange box, nor do they show up under his account name on the DCs (2003 forest). How can I crank up auditing for this one account to try and figure out where the bad logons are coming from -- and can I force it to show more source information, like an IP address?
David _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
