detection.wiki

Microsoft-Windows-EapMethods-RasChap

8 events across 1 channel

Event IDTitleChannel
100Authentication succeeded for user Domain, in domain Username.Operational
101Authentication failed for user Domain, in domain Username, with error int1.Operational
102Authentication failed for user Domain, in domain Username because it was …Operational
103Authentication failed for user Domain, in domain Username because the user …Operational
104Authentication failed for user Domain, in domain Username because the user's …Operational
105Authentication failed for user Domain, in domain Username because the user does …Operational
106The user's effort to change their password failed.Operational
107Sending creds to server for Username: Domain.Operational

Event ID 100 — Authentication succeeded for user Domain, in domain Username.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationsucceeded.

Description

Authentication succeeded for user Domain, in domain Username.

Message #

Authentication succeeded for user %1, in domain %2.

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—

Event ID 101 — Authentication failed for user Domain, in domain Username, with error int1.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationfailed.

Description

Authentication failed for user Domain, in domain Username, with error int1.

Message #

Authentication failed for user %1, in domain %2, with error %3.

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—
int1 UInt32—

Event ID 102 — Authentication failed for user Domain, in domain Username because it was attempted outside permitted logon hours.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationfailed.

Description

Authentication failed for user Domain, in domain Username because it was attempted outside permitted logon hours.

Message #

Authentication failed for user %1, in domain %2 because it was attempted outside permitted logon hours.

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—

Event ID 103 — Authentication failed for user Domain, in domain Username because the user account is disabled.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationfailed.

Description

Authentication failed for user Domain, in domain Username because the user account is disabled.

Message #

Authentication failed for user %1, in domain %2 because the user account is disabled.

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—

Event ID 104 — Authentication failed for user Domain, in domain Username because the user's password has expired.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationfailed.

Description

Authentication failed for user Domain, in domain Username because the user's password has expired.

Message #

Authentication failed for user %1, in domain %2 because the user's password has expired.

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—

Event ID 105 — Authentication failed for user Domain, in domain Username because the user does not have dial-in permission.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationfailed.

Description

Authentication failed for user Domain, in domain Username because the user does not have dial-in permission.

Message #

Authentication failed for user %1, in domain %2 because the user does not have dial-in permission.

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—

Event ID 106 — The user's effort to change their password failed.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
Authenticationfailed.

Description

The user's effort to change their password failed. Username: Domain. Domain: Username.

Message #

The user's effort to change their password failed. Username: %1. Domain: %2

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—

Event ID 107 — Sending creds to server for Username: Domain.

Provider
Microsoft-Windows-EapMethods-RasChap
Channel
Operational
Task
RasChapauthenticationinprogressevent

Description

Sending creds to server for Username: Domain. Domain: Username.

Message #

Sending creds to server for Username: %1. Domain: %2

Fields #

NameDescription
Domain AnsiString—
Username AnsiString—