Objectives: Review Microsofts Logging Application using Event Viewer.

Research how to solve a problem or task using any search engine of choice.

Review permissions required to access specific logs on a Microsoft OS.

All text should be left on this assignment. Do not remove any text when you upload this assignment to Blackboard.

Review the following links.

https://www.howtogeek.com/124313/how-to-see-who-logged-into-a-computer-and-when/

https://www.groovypost.com/howto/check-windows-logon-events-windows-8/

1- Create an account called WigglesWorth

Password = dorian2019

This user should not be an administrator.

Use the net user command demonstrated in class to document this user.

Paste a screenshot of the command net user

Login as this user.

2- Using event viewer create a screenshot demonstrating that this user has logged into your computer successfully. You may use your VM or the classroom systems.

3- Log off the computer and then attempt to login again as this user. Use an incorrect password at least 3 times.

Log back in as a user who has rights to review the event logs.

Create a screenshot documenting the failed login attempts using the security event viewer.

You will need to research what events are necessary to find this information.

4- You are combing through the event logs and notice that the system event viewer indicates there are a lot of Event ID 6008 messages in the logs of your Server 2012 server.

Briefly explain what is happening based on this event.

Paste a link from an online knowledge base that supports your theory.