Re: Multiple Accounts Being Locked Out - HELP Please!!
From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 01/27/05
- Next message: Steven L Umbach: "Re: How About a Hardended Win2K Image to Bash?"
- Previous message: Roger Abell [MVP]: "Re: Which regulation governs data backup retention ?"
- In reply to: JerryAMWE: "Multiple Accounts Being Locked Out - HELP Please!!"
- Next in thread: Steven L Umbach: "Re: Multiple Accounts Being Locked Out - HELP Please!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 26 Jan 2005 20:08:00 -0500
JerryAMWE wrote:
> I am running a Windows NT 4.0 Domain with a PDC and BDC. We have
> about 800 users. What I noticed today is that each account is being
> alphabetically locked out because there are a lot of unsuccessful
> logon attempts (approx. 100 attempts per account). I noticed that
> the attacks were coming from 3 PCs. I removed the PCs from the
> network and checked to verify that the eventlogs on the PDC/BDC had
> stopped locking out accounts. About 30 minutes later, the problem
> started again from a different PC. The PCs I had removed were
> checked for spyware and viruses. One had the Bat.Noshare.v virus,
> the other was clean. The 4th PC that started causing the problem was
> also checked for viruses and spyware. It was also updated with
> critical patches, yet the problem persists. Please help!! I can't
> determine what is causing this and therefore, I can't find a fix for
> it.
>
> Sincerely,
> Jerry (At My Witts End)
Turn off account logoff. It could be a great way for someone to completely
mess up your network. I'm a recent convert to this view....I don't set it
anymore.
What's open in your firewall, inbound, to your network?
What are your client OSes?
Do users have local admin rights?
You need good, centralized antivirus software on all your PCs - kept updated
regularly, and with regular scheduled scans.
Pull the offending PCs off the domain/network while you look at them -
- Next message: Steven L Umbach: "Re: How About a Hardended Win2K Image to Bash?"
- Previous message: Roger Abell [MVP]: "Re: Which regulation governs data backup retention ?"
- In reply to: JerryAMWE: "Multiple Accounts Being Locked Out - HELP Please!!"
- Next in thread: Steven L Umbach: "Re: Multiple Accounts Being Locked Out - HELP Please!!"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
