IIS7 logs all authentication attempts in the event log -> Security category with all the authentication related information like: Security ID: domain\User Account Name: username Account Domain: domain ... Network Information: Workstation Name: Source Network
Address: xx.xx.xxx.xxx Source Port: 3718 Detailed Authentication Information: Logon Process: Kerberos Authentication Package: Kerberos We've installed a new server with Windows 2008 R2 and IIS 7.5 and the new server doesn't seem to log these events anymore.
Is there a setting somewhere to enable this?
↧