Account Locked up

From: Robert. (srakaba@bbnow.com)
Date: 10/24/02 

From: "Robert." <srakaba@bbnow.com>
Date: Thu, 24 Oct 2002 05:00:19 -0700

last night, We had a machine outside our network attacked
our entire MS-Network that resides outside the Firewall.
What made this attack of an interest that all our accounts
inluding Windows Computer accounts been locked out. Some
how the Attacker managed to attempt to log in using our
SAM database (In alphabatical order) even the disabled
accounts were locked. Any Idea how did this happen and How
can We prevent it. We are running Windows NT4.0 With SP6
and All Security fixes installed.

Thnaks

Relevant Pages

  • Re: Protection from Hackers
    ... protect your hard drive from an intruder that had physical access to your ... protect the accounts in the domain from this sort of attack [though the ... Linux / Unix / BSD are also vulnerable to this sort of attack. ...
    (microsoft.public.win2000.security)
  • Re: ssh security
    ... what are valid accounts and what are not. ... It's considered axiomatic that security ... > system accounts (and over 99.9% are root, which does not get ssh access ... There are even some bots and apps that attack you from different IP ...
    (Fedora)
  • Re: Pubstro rash
    ... passwords against all of the accounts. ... We see this type of attack regularly in the .EDU world. ... administrator password on many machines, ... if there is a local administrative user named "brian" on that same ...
    (Incidents)
  • Locked accounts
    ... our entire MS-Network that resides outside the Firewall. ... What made this attack of an interest that all our accounts ... inluding Windows Computer accounts been locked out. ...
    (microsoft.public.win2000.security)
  • Re: Were we hacked?
    ... on your NT domain controllers. ... If this attack came from the internet, your firewall would block ... > PS I might change your account policy on the domain to unlock all accounts ...
    (microsoft.public.security)
Quantcast