CWA - 01 - Authentication Module\CWA - 003 - Forms auth logon failures\_Total perf counter exceeded specified threshold. Current value is {0}
This counter shows the total number of forms logon attempts that have failed since the Communicator Web Access virtual server was started.
Failures may be caused by Active Directory connectivity problems, incorrect information supplied by users, or users who are not authorized to use Communicator Web Access. A large number could indicate abnormal logon activity.
Ensure Active Directory connectivity. Enable logon failure auditing if the reason for logon failures is unknown.
Target | Microsoft_Office_Communications_Server_2007_R2_Communicator_Web_Access | ||
Parent Monitor | System.Health.PerformanceState | ||
Category | PerformanceHealth | ||
Enabled | True | ||
Instance Name | CWA - 01 - Authentication Module | ||
Counter Name | CWA - 003 - Forms auth logon failures | ||
Frequency | 900 | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Normal | ||
Alert Auto Resolve | True | ||
Monitor Type | System.Performance.DeltaThreshold | ||
Remotable | True | ||
Accessibility | Public | ||
Alert Message |
| ||
RunAs | Default |
<UnitMonitor ID="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_500_2_CWA" Accessibility="Public" Enabled="true" Target="Microsoft_Office_Communications_Server_2007_R2_Communicator_Web_Access" ParentMonitorID="SCHealth!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="SCPerformance!System.Performance.DeltaThreshold" ConfirmDelivery="false">
<Category>PerformanceHealth</Category>
<AlertSettings AlertMessage="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_____This_counter_shows_the_total_number_of_forms_logon_attempts_that_have_failed_since_the_Communicator_Web_Access_virtual_server_was_started_">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/Value$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_500_2_CWA_OverThreshold" MonitorTypeStateID="OverThreshold" HealthState="Error"/>
<OperationalState ID="CWA___01___Authentication_Module_CWA___003___Forms_auth_logon_failures__Total_500_2_CWA_UnderThresold" MonitorTypeStateID="UnderThreshold" HealthState="Success"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="SCWindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>CWA - 003 - Forms auth logon failures</CounterName>
<ObjectName>CWA - 01 - Authentication Module</ObjectName>
<InstanceName>_Total</InstanceName>
<AllInstances>false</AllInstances>
<Frequency>900</Frequency>
<Threshold>500</Threshold>
<NumSamples>2</NumSamples>
<Absolute>true</Absolute>
</Configuration>
</UnitMonitor>