Configuring Authentication-related Audit Policies

 

 

1.    Open Server Manager, click the Tools, and then click Group Policy Management.
2.    Then Right-click the Default Domain Controllers Policy, and then click Edit.
3.    In the Group Policy Management Editor window, in the navigation pane, expand Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies, and then click Audit Policy.
4.    In the details pane, double-click selected option and do this

 

5.    Repeat In the Group Policy Management Editor window, in the navigation pane, navigate to Computer Configuration\Policies\Windows Settings\Security Settings\Advanced Audit Policy configuration\Audit Policies, and then click Audit Policies.

6.    Type gpupdate /force, and then press Enter.

We finished ours ADDS configuration now just logon client pc as at least 1 error password and 1 correct password

Insert incorrect password

Insert incorrect password

 

 

 

Open Server Manager, click Tools, and then click Event Viewer.

In Event Viewer, in the navigation pane, expand Windows Logs, and then click Security.