• Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA log files

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2000 General] >> ISA 2000 SBS >> ISA log files Page: [1]
Message << Older Topic   Newer Topic >>
ISA log files - 12.Sep.2005 1:49:00 PM   


Posts: 1
Joined: 12.Sep.2005
From: usa
Status: offline
I have Small Business Server 2000 installed, with ISA 2000. I need help trying to decipher the log files. I am finding a user tryting to log onto inappropiate sites, and would like to understand the log file better, to hopefully find out what machine is being used.
I received the following message in my event log.
"the server was unable to logon to the windows nt account "F_ _ _ "(I omitted the rest) due to the following error: Logon failure: unknown user name or bad password. the data is in the error code.
Event ID: 100
So, when I went into the ISA server log, I found an entry at 22:20 with a public IP, and where the local machine IP address would be, were the words "get head".
I know it's a long shot, but it would be handy to be able to read the log report generated, more fully.......
Post #: 1

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2000 General] >> ISA 2000 SBS >> ISA log files Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts