![NoraD NoraD](https://community.lansweeper.com/html/assets/User_Avatar.png)
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-05-2015 01:32 PM
Hi
I have a Scheduled Eventlog Scanning task against my Domain Controllers (W2008 R2) each 15 minutes, and I enabled the option "Scan Success audit events" in Server Options. After that, although I began to receive events from my DCs, I can't see the EventID 4740 (Source: Microsoft Windows security) that tells me when an user account was locked out in Active Directory.
I don't understad what happen because the event 4740 is a Sucess Audit Event too.
Any idea?
Thanks a lot !!!
I have a Scheduled Eventlog Scanning task against my Domain Controllers (W2008 R2) each 15 minutes, and I enabled the option "Scan Success audit events" in Server Options. After that, although I began to receive events from my DCs, I can't see the EventID 4740 (Source: Microsoft Windows security) that tells me when an user account was locked out in Active Directory.
I don't understad what happen because the event 4740 is a Sucess Audit Event too.
Any idea?
Thanks a lot !!!
Solved! Go to Solution.
Labels:
- Labels:
-
General Discussion
1 ACCEPTED SOLUTION
![Daniel_B Daniel_B](https://community.lansweeper.com/legacyfs/online/forums_avatars/9715.png)
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-06-2015 01:04 PM
Changing your settings under Configuration\Server options, section Eventlog scanning, will only have effect for events being logged after the time you changed the setting. You won't be able to retrieve events logged more than 24 hours ago.
1 REPLY 1
![Daniel_B Daniel_B](https://community.lansweeper.com/legacyfs/online/forums_avatars/9715.png)
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎08-06-2015 01:04 PM
Changing your settings under Configuration\Server options, section Eventlog scanning, will only have effect for events being logged after the time you changed the setting. You won't be able to retrieve events logged more than 24 hours ago.
![](/skins/images/99C55DEA87BDD7EE44074014A1B9F92F/responsive_peak/images/icon_anonymous_message.png)