Need to find Intuder Machine

From: De` Baorsch (spam.org@spam.net@spam.com)
Date: 11/14/02 

From: "De` Baorsch" <spam.org@spam.net@spam.com>
Date: Thu, 14 Nov 2002 02:10:16 -0800

On one of sites I support I suspect someone is bringing in a laptop from
home some times to access the net for an hour or two by plugging a patch
cord in a live drop. The place is 24x7 and physically large with many
buildings and drops. The machine tried to unsuccesfully join my domain
giving the name of one of our exchange servers as name of the domain. (I
have no roming profiles, so the exchange server name is commonly know among
staff) When it couldn't join it created a workgroup with the name of the
exchange server on the laptop, got an IP from DHCP and registered in the
WINS server. As a result email is getting pointed to the wrong Exchange
Server (the intruder laptop) and crashes.I was able to get the MAC of the
machine and the machine name.
Any ideas to find the drop the person is using when they do it, or to block
access to that machine from NT 4.0?

 Thanks for feedback

Relevant Pages

  • outlook/exchange & windows security
    ... 2002 sp-1 on my office desktop, laptop and home computer. ... have an exchange server setup to manage the mail. ... then i did an inplace reinstall of winXP to fix other problems. ... check your username and domain, ...
    (microsoft.public.outlook.general)
  • Re: Roaming Profiles, Folder Redirection, .OST Files and Security
    ... them at all, don't use cached mode. ... I have a concern about the .OST file being on the local laptop. ... exchange server on site - it is accessed over a slow VPN WAN link. ...
    (microsoft.public.exchange.admin)
  • Re: Roaming Profiles, Folder Redirection, .OST Files and Security
    ... I have a concern about the .OST file being on the local laptop. ... exchange server on site - it is accessed over a slow VPN WAN link. ... certificates as encryption really does work. ...
    (microsoft.public.exchange.admin)
  • Re: exchange server (2k) not distributing emails
    ... >> exchange server) has a forward lookup zone abc.com and the name server is ... using netmon or something similar. ... >>> from the firewall people. ...
    (microsoft.public.exchange2000.admin)
  • Re: exchange access is very sluggish
    ... >I am running windows xp and outlook xp on a dell inspiron laptop. ... > exchange server but that didnt seem to cure it. ... > What issues should I look at in outlook to see if my information store is ...
    (microsoft.public.exchange.admin)