I have implemented logging logon failures on my NT 4 domain. However, bad logon failures from a win2k machine aren't showing up. I think its because 2k caches domain passwords to verify against, so the pdc does't ever get asked the bad password. Does anybody have any ideas of whats going on and how I can fix this problem?
Matt
Matt