I may be missing something but I am not getting notified when Event ID 4740 is occurring, in fact when I run the User locked out report it's not seeing 4740 at all. I have gone through all the articles I can find and the event is popping up in the event log Lan sweeper is just not picking it up.
Thoughts?
Thanks
