Audit Failure Log is missing on Windows 2012R2

M

manisit

New Member
Messages
4
Reaction score
0
Hello, I am a beginner and have purchased the Pro package to customize Windows Server 2012R2.

However, I encountered a minor issue after applying the LITE theme. The Windows logs do not show Audit Failures when someone uses Remote Desktop and enters the wrong password.

Please advise which component I need to enable.

Thank you.

View attachment 12676
 
Please attach your preset, it's not a known detail in advance, needs testing on our side.
You can also send it to me directly or on support at ntlite.com, feel free to edit private data from it.
 
Thanks.
Did the testing, and you won't believe the name of the needed component for auditing:
"Windows Audit" ;)

So after loading your preset, go to the Components page, re-check that one before processing.
Btw you also disable Remote Desktop in settings, I would reset that setting.
Remember to overwrite your preset after these changes.

Let me know if all good now, passed my tests.

Btw reason why Audit is in the templates: it's more like telemetry to a normal user, and ports are not open to begin with, unlike with the server.
It should be simple enough to go over the unchecked components and keep those you need, one template cannot be for everyone, that's full Windows.
But if I get more similar reports, I might remove this component from the template, it's all based on voting and general use.
 
Okay, after I selected Windows Audit, everything works fine now.

I had no idea it was related because on Windows Server 2019, everything was working fine even though I didn't pay attention to the Windows Audit part.


Thanks!!!
 
Last edited:
You must log in or register to reply here.
Back
Top