question

HKG-7714 avatar image
0 Votes"
HKG-7714 asked ppinero-8756 published

ADFS successful login doesn't show in the event viewer

I enabled the ADFS log according the doc https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/troubleshooting/ad-fs-tshoot-logging.

I can see the failed login but the successful login doesn't show in the event viewer. Any idea why this happens? I did confirm the Audit Application generated has both failure\successful selected in the local security policy.


Thanks

adfs
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

What event IDs are you seeing for the failed logins?

0 Votes 0 ·
piaudonn avatar image
1 Vote"
piaudonn answered

Those are event if the AD FS Admin log. Audit events will be in the Security log.


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks so much. The log is indeed in the security, I was looking at the wrong log.

Thanks again.

0 Votes 0 ·
HKG-7714 avatar image
0 Votes"
HKG-7714 answered

I got the event ID 364\1000\342.


Thanks


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ppinero-8756 avatar image
0 Votes"
ppinero-8756 answered ppinero-8756 published

Hi,

I have the same problem.... i confirm that I have enable both audits for succes and failed logins but i do not see success logins....

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

ppinero-8756 avatar image
0 Votes"
ppinero-8756 answered

I have the same problem... i am not able to view the success login .... how did you achieve it?.

Thank you in advance.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.