Use case: Use this procedure to identify user accounts with failed login attempts in Active Directory. EasyEntra makes it easy to search for accounts with recorded login failures and to review the BadPwdCount attribute for individual users.
To find failed login attempts, follow these steps:
- Select the OU where you want to find failed logins.
- In the EasyEntra search field, type:
(badpwdcount>0)
The search results will display all users with one or more failed logins.
To view the number of failed logins for a specific user:
- Open the user’s property window.
- Click the Additional tab in the lower left corner.
- Find the BadPwdCount attribute.
- Click Cancel.
EasyEntra allows for LDAP queries, and to simplify things even more, EasyEntra implements “relaxed” typing of LDAP queries. To learn more, have a look at Advanced AD searching.
ID:KB_041_Howtofindfailedloginattempts
