@sean.rabbitt are you doing this on High Sierra? I have tested this by
locking my mac, typing a wrong password 3 or 4 times, and then checking
that file and it still shows a count of 0. Any ideas why this would be?
What version are you using?
@gachowski I am NOT seeing this. Are we supposed to see this message on
the login page of the mac? That would be a perfect solution we don't
actually need to be notified if the user knows to contact the helpdesk.
Is there a way to show this on the lo...
@amosdeane Did you ever figure this out? We're running High Sierra
10.13.4 and the log event suggested at the top of the post here doesn't
exist anymore. Seems like a rather unreliable method to find failed auth
atttempts. I'm trying to find a way to...
So I've got the same issue. I have a sort of similar solution. I use the
log tool to grep for a specific line that specifies when a user attempts
to login on a machine that is locked out. Unfortunately today we got a
false positive so apparently this...
