With IPHost Network Monitor you can run WMI Audit Fail monitoring of various devices in your network.
To create a WMI monitor for Audit Fail, provide host name (it must be a Windows host) and specify custom WQL query:
Specifies the Audit Permissions for failure. The permissions are a combination of one or more of the following:WINSTATION_QUERY, WINSTATION_SET, WINSTATION_VIRTUAL | STANDARD_RIGHTS_REQUIRED, WINSTATION_SHADOW,WINSTATION_LOGON, WINSTATION_LOGOFF, WINSTATION_MSG, WINSTATION_CONNECT, WINSTATION_DISCONNECT.
The Win32_TSAccount class allows deleting an existing account on the Win32_Terminal class and Modify exisiting Permissions
IPHost Network Monitor is an advanced and easy tool for monitoring LAN and WAN networks, network servers, workstations and TCP/IP devices. Use IPHost Network Monitor to monitor your servers, domains, computers and devices.
