Forum Discussion

deepak198486's avatar
deepak198486
Copper Contributor
Sep 28, 2021

Event id 4625 is not being genertaed when I rdp the host with correct username and wrong password

Event id 4625 is not being genertaed when I rdp the host with correct username and wrong password

But

when i use wrong username event id 4625 is being generated what could be the probable cause for this

 

when i do interactive login(locally) with correct username and wrong password 4625 is being generated

2 Replies

  • Darkmenance's avatar
    Darkmenance
    Brass Contributor
    If you are not programming this and it part of download remote tool then report it to the company support team as they have incorrectly set the programming code line parameters.
  • Darkmenance's avatar
    Darkmenance
    Brass Contributor
    Simply the event ID 4625 is applied to only detect password is incorrect.

    If you are programming this then check your code line and apply it to detect user name is incorrect.

    Otherwise set it to detect when either user name or password is incorrect to avoid any issues.

Resources