Need help to uncover potential Attack

[divaniti]

Good day
on my network (Domain controller with 2003 server) i need to check if someone is using my admin user to login to my network or any certain machine
in other way can i audit failed logon attempts>
can anyone help!

 

[Elizabeth23]

http://www.manageengine.com/product...d=5708062727&gclid=CKWYj9jepL0CFSwdOgodHQsAmw

you could try this for the 30 days free trial and just uninstall later,

===========

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/518.mspx?mfr=true

read this on how to audit logons