How to Detect Attacks not Resulting
in Account Lockouts

Account lockout auditing can be a good way to detect someone trying to force their way into your environment. But these attacks don’t always result in account lockouts, so to more fully protect your systems and data, you also need to monitor all logons, both failed and successful.