What event logs are captured by Windows Event Viewer from Authentication Services logins?
The authentications show up in the Event Viewer as Kerberos Authentication Service and Kerberos Service Ticket Operations with Event ID's of 4769 and 4768.
Essentially, all authentications through the product with AD are done via Kerberos.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Nutzungsbedingungen Datenschutz Cookie Preference Center