We have auditing set up across all our domain controllers, and they are being monitored by PRTG.
i want to be alerted when a user fails to log into their machine /server
Whats the best way to set this up?
Monitor failed logon attempt
Modified on 2025-06-10 16:23:36 +0200
Disclaimer:
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
Hi there,
Thank you very much for your contact.
There is no built-in sensor for specific failed logins, but it should be doable with the Event Log (Windows API) sensor and monitoring the Windows event log entries as described here.
Best regards,
Sebastian
Jun, 2019 - Permalink