Allowed Attempts for Multi-Factor Authentication Exceeded
Sent when a user exceeds the allowed number of attempts for multi-factor authentication. For more information, see Multi-Factor Authentication.
General Information
Event ID: 40206
Event message details: User <User> has been locked out by entering too many invalid MFA codes
Severity: Info
Parameters
Parameter Name | Description | Example |
|---|---|---|
UserName | Name of the user who performed an operation. | UserName="TECH\user1" |
Endpoint |
| Endpoint="[::1]:52182" |
SID | User security identifier. | SID="S-1-5-21-670747961-1840839389-3357612639-1134" |
Version | Event version (service parameter). | Version="1" |
Description | Event message details. | Description="User TECH\user1 has been locked out by entering too many invalid MFA codes." |
Syslog Message Example
<14>1 2023-10-23T20:50:33.367146+02:00 VBRSRV01 Veeam_MP - - [origin enterpriseId="31023"] [categoryId=0 instanceId=40206 UserName="TECH\user1" Endpoint="[::1]:52785" SID="S-1-5-21-670747961-1840839389-3357612639-1134" Version="1" Description="User TECH\user1 has been locked out by entering too many invalid MFA codes."] |