Account lockouts not in Event Viewer

Solution 1:

Craig, you are correct it is 4740, however I did search for that before and received nothing. On the Windows 7 client it is 4625.

I found the issue. The Audit Account Lockout policy I mentioned was set to "failure" only. Once I enabled "success" it logged the lockouts with ID 4740. I thought I had tested "success" previously, but after filtering the log for 4740 I only found today's events. The log in Windows 7 must have thrown me off since that one shows 4625 with "failure" and account lockout as the category.

Thanks.

What Event ID is generated when a scheduled task fails in Windows Server 2003?

Toggling enabled/disabled on specific triggers in a task in the task scheduler using powershell (or something else)

Shouldn't Google Compute Engine disk auto-resize when uploading data?

If $σ ∈ S_n$ is a cycle of odd order $m$, show that $σ^2$ is also a cycle of the same order $m$

Why is it true that $f(x) \leq \frac{x-a}{b-a}f(b) + \frac{b-x}{b-a}f(a)$? [closed]

Is there a way to rewrite this matrix equation to eliminate inverse matrix?

Proving this piecewise function is measurable.

Show that the sequence $x_N$ converges weakly and compute the weak limit

Getting Stone duality from the duality between sober spaces and spatial frames

Word that denotes number of numbers by which a number can be divided without a remainder

Covariant and Contravariant Transformation - Example of Polar Coordinates