Search results
4625: An account failed to log on. On this page. Description of this event. Field level details. Examples. This is a useful event because it documents each and every failed attempt to logon to the local computer regardless of logon type, location of the user or type of account.
Jan 3, 2022 · This event is logged for any logon failure on domain controllers, member servers, and workstations. It contains information about the account, logon type, failure reason, status, and process that reported the logon failure.
Event 4625 is a Windows logon failure event that can have different status and sub-status codes. See the list of possible values and their descriptions, and how to find more information in the Windows header file ntstatus.h.
May 13, 2023 · Learn what causes and how to fix event ID 4625, a security event log that indicates a failed logon attempt in Active Directory. Find out the properties, status codes, and troubleshooting steps for this event.
Apr 26, 2024 · Learn how to troubleshoot and audit account lockouts using event IDs 4740 and 4625 in Windows. Event 4625 is logged on client computers when an account fails to logon or is locked out.
Event ID 4625 (viewed in Windows Event Viewer) documents every failed attempt at logging on to a local computer. This event is generated on the computer from where the logon attempt was made. A related event, Event ID 4624 documents successful logons.
Learn what Event ID 4625 means and how to use it to improve your threat detection. See how to spot brute-force attacks, compromised accounts, insider threats, and security compliance issues with PowerShell script.
