Report for Failed Login to Server

[sertian]

Hello,
I am new to LS. I am looking to create a custom report that will email admins when a user has tried too many times to login and has been locked out of AD. Thanks in advance.

[Hemoco · Accepted solution]

I don't know the exact event code but most likely this will be logged in the event viewer on your domain controller.
Can you verify this please.