medium10 pts · first answer countsidentity-securitywindows-event-logs

Reading 4625 sub-status codes

One external IP produced 3,000 failed logons (event 4625) in an hour. About 2,900 have Sub Status 0xC0000064 and about 100 have 0xC000006A. What does this tell you?

A.Most attempts hit locked accounts and a few hit disabled onesB.Most attempts used expired passwords and a few used wrong onesC.Most tries used non-existent user names; about 100 hit real onesD.All attempts used correct passwords but lacked logon rights

Discussion 0

Join free to post in the discussion.

Reading 4625 sub-status codes

Discussion 0

Related questions