Access Denied Event ID

[howler]

I need to monitor if users are constantly trying to access folders they do not have permission to

I am assuming that an event is written to the event log of the server everytime that the user is denied access

Anyone know what the event ID is? Will it be in the security event log as a failure audit?

 

[howler]

Yeah I wasn't planning on trauling through them manually, that would be awful