查看服务器账号锁定,域账号被恶意输错密码导致锁定，如何追查原因？ - winServer论坛 - 51CTO技术论坛_中国领先的IT技术社区...

复制内容到剪贴板

代码:Finding all events reguardless of date or time.

Searching Security Logs

Event IDs:   529 644 675 676 681

No Event Text specified.

No Event Source specified.

No Between Event IDs specified.

Will Search the following servers:

WSSHP001

To find these events we'll need a search running. It has already begun....

Spawning Thread for: WSSHP001

Thread Running for: WSSHP001

All threads Scheduled to run are running.

Opening: c:\temp\WSSHP001-Security_LOG.txt

Number Of Records for the Security log on WSSHP001 is 248622

Total Bytes Read ending with the Security log on WSSHP001: 64593760

c:\temp\WSSHP001-Security_LOG.txt contains no parsed events.

Exiting thread for: WSSHP001

Total events searched: 248622

Total matches found: 0

Servers/Logs Searched: 1

DLL Cache Contained: 0

SID Cache Contained: 0

Start time: Wed Mar 26 08:50:34 2014

Finish time: Wed Mar 26 08:51:43 2014

True records per second: 3551.74