User Accounts Keep Locking Out

From: John (john@mousehut.com)
Date: 01/23/03


From: john@mousehut.com (John)
Date: 23 Jan 2003 14:33:32 -0800

Hey All:

Running a Win2k Web Server and am having a problem with all user
accounts being locked out every few weeks or so except the original
admin account (which was renamed).

I am guessing there is some tool out there that can read the user
accounts on a machine and then is automatically trying to crack the
passwords. Of course, the machine is set to lock people out after 3
bad attempts so that's not getting to far and we enforce tough
passwords.

So, my question is, is there any way to stop this? Can anything be
done or do I have to live with unlocking everyones account every few
weeks (hope not).

Any help would be greatly appreciated.



Relevant Pages

  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.win2000.security)
  • RE: Security Logging - Passwords & Accounts
    ... Security Logging - Passwords & Accounts ... Does anybody know of any way to log changes to user & group accounts and ...
    (RedHat)
  • Antivirus programs for XP - best ones?
    ... DON'T create user accounts during setup as they will become ... Turn of transmission of passwords and user credentials in clear ... Keep your system and ALL installed applications uptodate (Microsoft ...
    (alt.computer.security)
  • Re: Trillian Ver 3.1 saves passwords in plain Text
    ... >Cc: Suramya Tomar ... When you choose the option to check your yahoo email from Trillian ... I have a YIM, ICQ, AIM and several Jabber accounts. ... >trace of any of my passwords in any file in this directory. ...
    (Bugtraq)