Hi,
I am after LEM to report and alert on failed local logon attempts...
I have looked within the filters and there is a 'Local Account Authentication/Changes' but it showing 0 results, even after I did some failed attempts on a machine to test
Can't see anything obvious as to where im going wrong
Many Thanks,