Monitored event`s IDs

What are the IDs of events monitored by NetWrix Account Lockout Examiner. Event IDs.
Email It to Me Print this Page
NetWrix Account Lockout Examiner monitors invalid logons and lockouts. 
Here is the detailed list of the monitored events:
Windows Vista/2008/7/2008R2Windows XP/2003TypeDescription
4771675FailureInvalid Kerberos logon - Kerberos ticket request failed
4776680,681FailureInvalid NTLM logon - failed NTLM authentication attempt 
4740644SuccessAn account was locked out
4767671SuccessAn account was unlocked
4625529-539*FailureAn account failed to log on - actual invalid logon event

*In Windows XP/2003 actual invalid logons can be logged as any of 10 events with IDs between 529 and 539
Was this information helpful?