When searching for logon activity only 'User failed to authenticate through Kerberos' events are visible.
There are not any successful 'User authentications through Kerberos' events being audited.
Checking the ‘Audit Logon events’ audit policy for all servers and workstations, the policy is set for Success.
Perform the following steps to enable this event class:
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 使用条款 隐私 Cookie Preference Center