Admin lockout bug?

From: Sheila (sheila_espanol@hotmail.com)
Date: 08/08/02 

From: "Sheila" <sheila_espanol@hotmail.com>
Date: Thu, 8 Aug 2002 20:54:02 +0800

I disabled the default "Administrator" account and created another one with
a different name. Since then, I get failure logs from the Security logs
every couple of minutes.

Sometimes the user NT AUTHORITY\SYSTEM would try to log on but would
obviously fail because of "unknown username or bad password" or because
"Account locked out".

I read in some newsgroup post somewhere that it's a bug in win2k that will
be fixed in SP3...

Is this really a bug or are these security attacks already?

If it is a bug, does the SP3 really fix this? 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/2002

Relevant Pages

  • Re: How to know if someone accessed using RDP
    ... Was he logging in with a domain account? ... authentication from his user account. ... check the security logs on the server he was logging into. ...
    (microsoft.public.win2000.active_directory)
  • Re: Admin lockout bug?
    ... builtin Administrator account... ... I get failure logs from the Security logs ... > I read in some newsgroup post somewhere that it's a bug in win2k that will ...
    (microsoft.public.win2000.security)
  • Re: AD User Account Illusions
    ... We have the logs set at maximum which is 4,194,240k This ... >the available disk space allotted to your security logs ... >>I have an account that continually dissapears out of AD ...
    (microsoft.public.win2000.active_directory)
  • Re: Win2003 loses AD user account
    ... If a domain administrator logs onto a domain workstation and the ... See if the security logs on the domain controller can pinpoint ... have to correlate logon events in the security log to the account deletion ...
    (microsoft.public.windows.server.security)
  • Re: Security log is blank?
    ... will be shown in the log on the local computer unless a user logs into the ... the ex employee has his account disabled. ... The security logs on this pc have not been ...
    (microsoft.public.win2000.security)