Re: Admin lockout bug?

From: Dave Sayers [MS] (dsayers@online.microsoft.com)
Date: 08/08/02 

From: "Dave Sayers [MS]" <dsayers@online.microsoft.com>
Date: Thu, 8 Aug 2002 14:25:30 +0100

Could you clarify this for us please, as it's not possible to disable the
builtin Administrator account... 

--
--
Regards,
Dave
--
Dave Sayers [MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias. This alias is for newsgroup
purposes only.
"Sheila" <sheila_espanol@hotmail.com> wrote in message
news:Oqmn9htPCHA.2572@tkmsftngp08...
> I disabled the default "Administrator" account and created another one
with
> a different name. Since then, I get failure logs from the Security logs
> every couple of minutes.
>
> Sometimes the user NT AUTHORITY\SYSTEM would try to log on but would
> obviously fail because of  "unknown username or bad password" or because
> "Account locked out".
>
> I read in some newsgroup post somewhere that it's a bug in win2k that will
> be fixed in SP3...
>
> Is this really a bug or are these security attacks already?
>
> If it is a bug, does the SP3 really fix this?
>
>
>
>
>
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.381 / Virus Database: 214 - Release Date: 8/2/2002
>
>

Relevant Pages

  • Admin lockout bug?
    ... I get failure logs from the Security logs ... "Account locked out". ... I read in some newsgroup post somewhere that it's a bug in win2k that will ...
    (microsoft.public.win2000.security)
  • RE: Trace of 139 attack?
    ... Subject: Trace of 139 attack? ... The Administrator account can be locked out if too many ... deleting the logs he cannot do it. ...
    (Focus-Microsoft)
  • Re: FW: Trace of 139 attack?
    ... /complex—Forces passwords to have a mixture of upper ... > the admin account on local logins (physical security ... >> deleting the logs he cannot do it. ... >> ur Server ur logs will ...
    (Focus-Microsoft)
  • RE: Securty Audit Correlating
    ... exporting both(events and tickets) to a SQL/Access DB ... > viewer logs, so you can set filters for specific ... >>Currently we are outsourcing our account creation, ... >>After that generate a report. ...
    (Focus-Microsoft)
  • Re: Terminal Services Kiosk
    ... the locked-down account is the Active Directory account in ... the desktops, not the local accounts in the TS server. ... programs or kill the RD session? ... So one user logs in to the workstation ...
    (microsoft.public.windows.terminal_services)