I have it working Bruce. Using eventwin on the Windows server, you need it setup to send traps based on event id 644.
Then you need to have WUP set up to listen for that trap from the server and notify on it. I send an email out to the admins using the following layout. Subject: User Account locked out on %Device.HostName. Body: User account locked out: %PassiveMonitor.Payload.msSoftware.13.1.9999.6.0 This give a nice concise email with the information needed. Tim -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Meyer, Bruce Sent: Thursday, September 15, 2005 8:32 AM To: '[email protected]' Subject: RE: [WhatsUp Forum] SNMP Trap (Windows user accounted locked out) Jonnathan, I just read your question. Did you ever get this working? This would be a great feature to have. --Bruce Meyer -----Original Message----- From: Bryan Harrell [mailto:[EMAIL PROTECTED] Sent: Monday, August 29, 2005 3:41 PM To: [email protected] Subject: Re: [WhatsUp Forum] SNMP Trap (Windows user accounted locked out) WUG must access the NT server you are trying to monitor with administrative rights. If you loginto your WUG box and then try to admisnister the box remotely from there, if it denies you access to read the security logs thru event viewer, then you must add an administrator account to the box/domain that WUG can use to read the event logs. >>> [EMAIL PROTECTED] 08/29/2005 3:20:56 PM >>> I am trying to setup WUG to send out a notification when a user account is locked out. I have used the "evntwint.exe" util to setup the trap generation and verified the trap was sent to the wug box by using a sniffer program. I just can't figure out why wug will not generate the notification. Both SNMP services are running on the WUG box. Please help. Jonathan Brown Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/ Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/whatsup_forum%40list.ipswitch.com/
