CWA - 01 - Authentication Module\CWA - 003 - Forms auth logon failures\_Total

CWA_01_Authentication_Module_CWA_003_Forms_auth_logon_failures__Total_300_2_CWA (UnitMonitor)

CWA - 01 - Authentication Module\CWA - 003 - Forms auth logon failures\_Total perf counter exceeded specified threshold. Current value is {0}

Knowledge Base article:

Summary

This counter shows the total number of forms logon attempts that have failed since the Communicator Web Access virtual server was started.

Causes

Failures may be caused by Active Directory connectivity problems, incorrect information supplied by users, or users who are not authorized to use Communicator Web Access. A large number could indicate abnormal logon activity.

Resolutions

Ensure Active Directory connectivity. Enable logon failure auditing if the reason for logon failures is unknown.

Element properties:

Target

Microsoft_Office_Communications_Server_2007_R2_Communicator_Web_Access

Parent Monitor

System.Health.PerformanceState

Category

PerformanceHealth

Enabled

True

Instance Name

CWA - 01 - Authentication Module

Counter Name

CWA - 003 - Forms auth logon failures

Frequency

900

Alert Generate

True

Alert Severity

Warning

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

System.Performance.DeltaThreshold

Remotable

True

Accessibility

Public

Alert Message

CWA - 01 - Authentication Module\CWA - 003 - Forms auth logon failures\_Total - This counter shows the total number of forms logon attempts that have failed since the Communicator Web Access virtual server was started.

RunAs

Default

Source Code:

<UnitMonitor ID="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_300_2_CWA" Accessibility="Public" Enabled="true" Target="Microsoft_Office_Communications_Server_2007_R2_Communicator_Web_Access" ParentMonitorID="SCHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="SCPerformance!System.Performance.DeltaThreshold" ConfirmDelivery="false">

  <Category>PerformanceHealth</Category>

  <AlertSettings AlertMessage="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_____This_counter_shows_the_total_number_of_forms_logon_attempts_that_have_failed_since_the_Communicator_Web_Access_virtual_server_was_started_">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>Warning</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/Value$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_300_2_CWA_OverThreshold" MonitorTypeStateID="OverThreshold" HealthState="Warning"/>

    <OperationalState ID="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_300_2_CWA_UnderThresold" MonitorTypeStateID="UnderThreshold" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="SCWindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <CounterName>CWA - 003 - Forms auth logon failures</CounterName>

    <ObjectName>CWA - 01 - Authentication Module</ObjectName>

    <InstanceName>_Total</InstanceName>

    <AllInstances>false</AllInstances>

    <Frequency>900</Frequency>

    <Threshold>300</Threshold>

    <NumSamples>2</NumSamples>

    <Absolute>true</Absolute>

  </Configuration>

</UnitMonitor>

CWA - 01 - Authentication Module\CWA - 003 - Forms auth logon failures\_Total