I have various services configured to authenticate against Active Directory. It would be very helpful if they all logged authentication failures, but they don't. This makes debugging even a simple "incorrect password" error very frustrating.
Is it possible to watch in realtime (or later) authentication attempts against AD?
The AD is Windows Server 2003.