Event ID 681

The logon to account from workstation 

The logon to account: %2
 by: %1
 from workstation: %3
 failed. The error code was: %4

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:Logon/Logoff
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows 2003 Windows XP

Audit Category:
Logon/Logoff
Corresponding Events:
4776

LEFT/RIGHT arrow keys for navigation

Back to List