| Event Id | 1012 |
| Source | TermService |
| Description | Remote session from client name %computername% exceeded the maximum allowed failed logon attempts. The session was forcibly terminated. |
| Event Information | This information event indicates that, a logon attempt with invalid username or password has been made from the specified computer for the maximum number of times. This may indicate an attempted unauthorized system access. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.