• Home
  • About us
  • Contact
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

Welcome to www.DoitFixit.com

www.doitfixit.com

  • Microsoft
  • Fortinet
  • Symantec
  • Office 365
  • Azure
  • Others
  • Show Search
Hide Search

TRACE Invalid logon attempts to Exchange Server

July 10, 2011 By Damitha Anuradha Leave a Comment

By Enabling the IIS log,

All login information will be recorded in the application log, it includes the IP address of the client, Web Browser details, etc…

  1. Open IIS Manager console in administrative tools
  2. Expand the server name, sites. Click on the Default Web Site.
  3. Double click on Logging under IIS.

  4. Select the Format as “W3C“. (Different format generates different views of log files)

  5. Click on “Select Fields“, select all fields and click OK. (This option is not available for all formats)
  6. Select “Use local time for file naming and rollover“.

  7. In the Actions pane, click Apply.

    After that, you may look for the IIS log files in the %SystemDrive%\inetpub\logs\LogFiles folder. (This path may be changed if you change the directory path of the log file)


    Search for text “reason=2” This is the invalid attempt for the user. The log have all the relevant details for the invalid user logon attempt.


By Event Viewer, Exchange Server

Event ID 4625 displays all failed logons of exchange server. (Such as Account Name, Failure Reason, Source Network Address, etc…)


Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Recent Posts

  • Veeam Backup – Failed to prepare guests for volume snapshot
  • How to Configure/Integrate FortiClient EMS with FortiAnalyzer
  • Backup Hyper-V Virtual Machines with Pass-Through Disks
  • Slow Network Speed with Hyper-V Virtual Machines on Windows Server Server 2019
  • Block MS Exchange Server OWA access from Internet
  • Error 1168 – The specified product key could not be validated.
  • Unable to Enable Desktop Icons after Joining to the Domain
  • Veritas BackupExec – A backup set was created which contains no data 0xe00084b7
  • Download Offline Address Book – Unexpected Error has occurred
  • WSUS 4 Console crash – Connection Error

Deprecated: genesis_footer_creds_text is deprecated since version 3.1.0! Use genesis_pre_get_option_footer_text instead. This filter is no longer supported. You can now modify your footer text using the Theme Settings. in /home/wwwdoitf/public_html/wp-includes/functions.php on line 5238