Logon failures in x days report data is incorrect. (NETIQKB51637)

  • 7751637
  • 02-Feb-2007
  • 14-Nov-2007

Resolution

fact
NetIQ Vulnerability Manager 5.0

fact
NetIQ Vulnerability Manager 5.5

fact
NetIQ Vulnerability Manager Agent for Windows 5.0

fact
NetIQ Vulnerability Manager Agent for Windows 5.5

symptom
Data is incorrect in the Logon Failures in x Days report. 

symptom
The event log does not contain any failed logon events.

symptom
The Logon Failures in x Days report does not list failed logon attempts.

cause
The event log does not contain the events for the failed logins.  To create the Login Failures in X Days report, Vulnerability Manager queries the event log for the Computer endpoint and the Active Directory endpoint. 

fix

To ensure the Logon Failures in x Days report provides the correct data and that logon failure events are written to the event log, enable Windows auditing for logon failure events.

Perform the following procedure on each computer where you want Vulnerability Manager to monitor logon failures.

To enable Windows auditing for logon failure events:

  1. Click Administrative Tools in the Control Panel or in the All Programs group.

  2. Open Local Security Policy.

  3. In the left pane, click Audit Policy.

  4. In the right pane, click Audit logon events.

  5. Click Properties on the Action menu.

  6. Select Failure, and then click OK.



Additional Information

Formerly known as NETIQKB51637