RE: logon attempt inetinfo.exe
- From: v-terliu@xxxxxxxxxxxxxxxxxxxx (Terence Liu [MSFT])
- Date: Wed, 10 Oct 2007 05:47:47 GMT
Hello Customer,
Thank you for posting here.
According to your description, I understand that you want SBS send alert
email when there are more than certain number of event logs. If I have
misunderstood the problem, please don't hesitate to let me know.
Based on my research, SBS can monitor event log and send alert email to
administrator. However, the SBS will send alert email for each event log
which need to monitor. We unable to send alert after the event log more
than certain number. This is by design.
I understand that this limitation may inconvenience our users and we
apologize for the inconvenience you faced. In our efforts to continue to
improve our products, you are welcome to add your suggestions in
Partnerfeedback newsgroup to make Microsoft products easier and more
powerful to use. Thanks for your understanding.
Submitting suggestions for product enhancement:
Legitimate Wishes fit into the following guidelines:
Enhancement or feature addition to existing Microsoft products
Reproducible problem or bug with current version that needs resolution
Cannot find documentation of feature within the help files
Difficulty using the product
All beta products
Product packaging complaints
Added accessibility feature for a Microsoft product
These can be submitted here:
https://support.microsoft.com/common/survey.aspx?scid=sw;en;1214&showpage=1&;
WS=Wish&url=http%3a%2f%2fwww.microsoft.com%2fireland%2fcontact%2f
SBS will monitor event 539 and 5634 by default. If you want to monitor any
other event log, I suggest we try the following steps:
1. On SBS, please open Start -> Administrative Tools -> Health Monitor
2. Extend Health Monitor -> All Monitored Computers -> SBSname ->Small
Business Server Alerts -> Core Server Alerts
3. Right click Core Server Alerts, select New -> Data Collector -> Windows
Event Log Monitor
4. In the Details tab, you can input which event you want to monitor. In
the Actions tab, you can configure send email with monitoring alert. In the
Message tab, you can modify the alert email content.
5. Click OK.
Then, if there is the event log appear in SBS, you will get alert email.
If you still have concern about the logon attempt event log, please send
the event log to me at v-terliu@xxxxxxxxxxxxxx
I hope these steps will give you some help.
Thanks and have a nice day!
Best regards,
Terence Liu(MSFT)
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: logon attempt inetinfo.exe
| thread-index: AcgJ0qxG/SP8wIrhScGq8vZva18q0g==
| X-WBNR-Posting-Host: 207.46.192.207
| From: =?Utf-8?B?RHJ1?= <Dru@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: logon attempt inetinfo.exe
| Date: Mon, 8 Oct 2007 10:43:01 -0700
| Lines: 11
| Message-ID: <3754D09F-D85D-4CAA-8EB2-2200F6E8EC28@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2929
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:68054
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| more than the normal 50 or 100 logon attempts, i got 1041 at one time
from
| the IIS process, inetinfo.exe.
|
| i got tcpview so i can see the TCP connections, which is great, but.
|
| http://www.microsoft.com/technet/sysinternals/Networking/TcpView.mspx
|
| this always happens off-hours; is there a way to get an email alert when
I
| get more than X number of failed attempts?
|
| thanks
|
.
- Prev by Date: Re: Additional Domain Controller
- Next by Date: RE: Automatic windows update
- Previous by thread: Re: SBS SCripts stopped running
- Next by thread: Re: Server frozen every few days after a successful backup has verified
- Index(es):
Relevant Pages
|
