Correcting Event ID 644 in the ACS database

I ran into an issue the other day where Account Lockout events (Event ID 644) did not display properly in the “All Events With Specified Event ID” ACS report.  I’m looking for the name of the computer that is listed as “Caller Machine Name” in the event (the machine that passed the bad credentials that…

2

Monitoring a service for State and StartMode

I recently had a customer that wants to get an alert when a specific service is not Disabled and/or not Stopped.  I used the following steps to accomplish this using a “Timed Script Three State Monitor”.  Even if you do not have this specific need, these steps can be used as a template for creating…

9