Disk Arrays
cancel
Showing results for 
Search instead for 
Did you mean: 

SMA Authentication event logging

SOLVED
Go to solution
Gary crews
Frequent Advisor

SMA Authentication event logging

I have a customer that is concerned about login events on the SMA. When one logs in to the IE interface to connect to the SMA - where do the event notifiations go - for login failures, or how does one enable them? I have checked audit and security logs and see successful logins but no failures.

thx
2 REPLIES
Steven Clementi
Honored Contributor
Solution

Re: SMA Authentication event logging

Gary:

The SMA Web Login uses the standard Windows Accounts on the local server or domain. To enable audit logging for failures, you need to turn them on in the local policy editor.


At the console, or through Terminal Services... click Start, Programs, Administrative Tools, Local Security Policy...

In the Audit Policy section under Local Policies, find the right policy on the right side, double click to open the properties and enable lofgginf for failures.

I believe the one you want is Audit Logon Events, but might be Audit Account Logon Events.

I believe the default for Windows is to log successful attempts ONLY. Not failures.

Steven
Steven Clementi
HP Master ASE, Storage and Clustering
MCSE (NT 4.0, W2K, W2K3)
VCP (ESX2, Vi3, vSphere4, vSphere5)
RHCE
NPP3 (Nutanix Platform Professional)
Gary crews
Frequent Advisor

Re: SMA Authentication event logging

Steven - thanks - that was it!!