[UOGAddict]

I'm running Vista Home Premium.

I haven't really used the event viewer for much, but I assume there's a way to tell if someone had tried to log into the system with the incorrect password. If so how do you find this and collect the details?

Thanks

[lunarlander]

To see all logins, create a custom view looking for event ID 4624, 4636

To see just the failed logins, create a custom view looking for event ID 4625, 4628, 4630, 4635, 4740

[UOGAddict]

Ok so I set it up with 4624, 4636 and I see a long list of logins and what not.

I created one with 4625, 4628, 4630, 4635, 4740 and it showed 0 events. I logged out and tried loggin in with the incorrect password multiple times, and the log was still 0. Is there something else I need to do?

I thought there might be a difference because I use a biometric scanner to log in, but I tried both incorrect fingerprints and incorrect passwords and neither showed up in the report.

[lunarlander]

The eventID's are correct. Did you checkmark the Security log in that view?