Report
Report defines an eventlog or action to perform when a specified condition is fulfilled.
[Report]
01=LoginFailed eventlog [Options]
02=LoginSuccess -action [Options]
03=LoginFailedPKCS11 eventlog [Options]
04=LoginSuccessPKCS11 eventlog [Options]
05=LoginSuccessCREDUI eventlog [Options]
06=LoginSuccessLOGON eventlog [Options]
07=LoginSuccessUNLOCK_WORKSTATION eventlog [Options]
LoginFailed
Get a report if the Plugin, CSP, or KSP login was unsatisfactory.
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.
[Report]
01=LoginFailed eventlog -application lsass.exe -number {token-number} -result 160 -type 1
[Report]
01=LoginFailed eventlog -application "{application-name}" -number {token-number} -info "{result-message}" -type 0x0002
[Report]
01=LoginFailed registry -path HKCU\Software\Pointsharp\NetiD\Client\ReportResult\LoginFailed-{time} -names user;time;result;number -result {result} -number {token-number}
[Report]
01=LoginFailed file -path "C:\Temp\Report.txt" -value "{token-number};{user};{time};{result-message}"
LoginSuccess
Get a report if the Plugin, CSP, or KSP login was correct.
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.
[Report]
01=LoginSuccess -action SetLastCertificate -certificate {certificate-thumbprint}
LoginFailedPKCS11
Get a report if the PKCS#11 login was unsatisfactory.
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.
LoginSuccessPKCS11
Get a report if the PKCS#11 login was correct.
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.
LoginSuccessCREDUI
Get a report if the credential provider login was correct.
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.
LoginSuccessLOGON
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.
LoginSuccessUNLOCK_WORKSTATION
Values
Values are eventlog, registry, or file strings or specified actions.
- eventlog [Options]
-
See the report command for eventlog string configurations.
- registry [Options]
-
See the report command for registry string configurations.
- file [Options]
-
See the report command for file string configurations.
- -action [Options]
-
See the Available actions section for information about action types. The available actions are specified in the Action section.