#event-id-4944

1 article

Windows Events1

Windows security monitoring dashboard displaying Event ID 4944 account lockout events in a SOC environment

Event 4944

Microsoft-Windows-Security-Auditing

Windows EventInformation

Windows Event ID 4944 – Microsoft-Windows-Security-Auditing: An account was locked out

Event ID 4944 indicates that a user account has been locked out due to exceeding the maximum number of failed logon attempts within the configured lockout threshold period.

March 1812 min