Im looking for a way to monitor our group of servers, so that any failed login attempts (either at the systems keyboard and mouse or via RDP) are brought to my attention, either real time or on a schedule.
to give some background my server group is setup on a workgroup (no domain) and is a mix of windows 2003 servers with one 2008 enterprise system.
all i really want is a method of being alerted when someone trys to login to the server and fails. i know i might get some false positives from people who should be accessing it but have mistyped but i am willing to put up with these to make sure our systems are safe.
ideally if its an application it should be free, but im willing to look at pay software as long as its upto the job.