Rejestr systemu Windows - dziennik SAM, który identyfikuje nieudaną próbę logowania?

-1

Jestem nowy w rejestrze, patrzę na dziennik i próbuję ustalić, kiedy ostatnia nieudana próba logowania była dla użytkownika Studenta .. jak to ustalę? Z góry dziękuję! 

Sun Aug  2 19:44:34 2015Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000003E9 
Sun Aug  2 19:44:34 2015Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000003E9 
Sun Aug  2 19:44:34 2015Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000003E9 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\00000201 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\student 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000220 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000221 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000003E9 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\00000201 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\student 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000220 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000221 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000003E9 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\00000201 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\student 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000220 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000221 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744 
Wed Dec 11 19:15:17 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000003E9 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\Names 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\Names\None 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\Administrator 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\Guest 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Access Control Assistance Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Administrators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Backup Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Cryptographic Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Distributed COM Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Event Log Readers 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Guests 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Hyper-V Administrators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\IIS_IUSRS 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Network Configuration Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Performance Log Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Performance Monitor Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Power Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Remote Desktop Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Remote Management Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Replicator 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\Names 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\Names\None 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\Administrator 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\Guest 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Access Control Assistance Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Administrators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Backup Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Cryptographic Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Distributed COM Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Event Log Readers 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Guests 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Hyper-V Administrators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\IIS_IUSRS 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Network Configuration Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Performance Log Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Performance Monitor Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Power Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Remote Desktop Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Remote Management Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Replicator 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\Names 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups\Names\None 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\Administrator 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\Names\Guest 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Access Control Assistance Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Administrators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Backup Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Cryptographic Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Distributed COM Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Event Log Readers 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Guests 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Hyper-V Administrators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\IIS_IUSRS 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Network Configuration Operators 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Performance Log Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Performance Monitor Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Power Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Remote Desktop Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Remote Management Users 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Replicator 
Fri Dec  6 21:42:16 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Names\Users 
Fri Dec  6 21:41:18 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000001F4 
Fri Dec  6 21:41:18 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000001F5 
Fri Dec  6 21:41:18 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000001F4 
Fri Dec  6 21:41:18 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000001F5 
Fri Dec  6 21:41:18 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000001F4 
Fri Dec  6 21:41:18 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Users\000001F5 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000222 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000001F4 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000001F5 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000222 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000001F4 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000001F5 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000222 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000001F4 
Fri Dec  6 21:39:47 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5-21-4148432325-2076671351-2709350744\000001F5 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000223 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000227 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000228 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022B 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022C 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000239 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000242 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000243 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\LastSkuUpgrade 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000223 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000227 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000228 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022B 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022C 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000239 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000242 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000243 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\LastSkuUpgrade 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000223 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000227 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000228 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022B 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022C 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000239 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000242 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000243 
Mon Sep 30 04:03:42 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\LastSkuUpgrade 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\000003E8 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Names 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Names\WinRMRemoteWMIUsers__ 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\000003E8 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Names 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Names\WinRMRemoteWMIUsers__ 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\000003E8 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Names 
Thu Aug 22 14:46:01 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Names\WinRMRemoteWMIUsers__ 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\00000004 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\0000000B 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\00000004 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\0000000B 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\00000004 
Thu Aug 22 14:45:24 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\0000000B 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Members 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022E 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022F 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000232 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000238 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000023D 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000244 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\00000011 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Members 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022E 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022F 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000232 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000238 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000023D 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000244 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\00000011 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Aliases\Members 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Account\Groups 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022E 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000022F 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000232 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000238 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\0000023D 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\00000244 
Thu Aug 22 14:45:11 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Aliases\Members\S-1-5\00000011 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000} 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Groups 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Groups\Names 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Users 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Users\Names 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\RXACT 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000} 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Groups 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Groups\Names 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Users 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Users\Names 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\RXACT 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000} 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Groups 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Groups\Names 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Users 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\Domains\Builtin\Users\Names 
Thu Aug 22 14:45:10 2013Z   CsiTool-CreateHive-{00000000-0000-0000-0000-000000000000}\SAM\RXACT 
----------------------------------------
windows-registry subatomic
źródło
1
Przesłane informacje nie zawierają tych informacji.
Ramhound
1
Dlaczego przeglądasz dziennik SAM? Musisz zajrzeć do dziennika zdarzeń zabezpieczeń dla identyfikatora zdarzenia 4625: Konto nie może się zalogować . Zobacz też Jakie informacje pojawiają się w dziennikach zdarzeń? Jakieś błędy? (Podgląd zdarzeń)
DavidPostill
Znajduje się w dzienniku zdarzeń bezpieczeństwa w przeglądarce zdarzeń lub eventvwr na linii cmd.
Citizen

Odpowiedzi:

0

Patrzę na dziennik, próbując określić, kiedy była ostatnia nieudana próba logowania

Patrzysz na niewłaściwy dziennik.

Logowanie (udane i nieudane) jest rejestrowane w dzienniku zdarzeń zabezpieczeń.

Wydarzenie, którego musisz szukać, to:

EventID 4625: Konto nie może się zalogować

Aby znaleźć takie wydarzenia:

  1. Start - & gt; Uruchom & gt; „eventvwr.exe”

  2. Rozwiń „Dzienniki Windows” po lewej stronie i wybierz „Zabezpieczenia”

    enter image description here

  3. W sekcji „Działania” po prawej stronie kliknij „Filtruj bieżący dziennik ...”

    enter image description here

  4. W oknie dialogowym „Filtruj bieżący dziennik” kliknij „& lt; Wszystkie zdarzenia Ids & gt;”, wpisz „4625” i kliknij „OK”:

    enter image description here

  5. Jeśli nie uda Ci się zalogować, zobaczysz wydarzenia. Wyglądają tak:

    enter image description here

  6. W moim przykładzie możesz zobaczyć:

    Nazwa konta: DavidPostill

Dalsze czytanie

DavidPostill
źródło