Occasional Contributor

Event id 4625 is not being genertaed when I rdp the host with correct username and wrong password


when i use wrong username event id 4625 is being generated what could be the probable cause for this


when i do interactive login(locally) with correct username and wrong password 4625 is being generated

Simply the event ID 4625 is applied to only detect password is incorrect.

If you are programming this then check your code line and apply it to detect user name is incorrect.

Otherwise set it to detect when either user name or password is incorrect to avoid any issues.

If you are not programming this and it part of download remote tool then report it to the company support team as they have incorrectly set the programming code line parameters.
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE