Re: Is this a hacker?
From: Peter K. (pmkdatabase@yahoo.ca)
Date: 03/31/03
- Next message: Kwok Siang Kwang: "EAP-TLS"
- Previous message: Peter K.: "Re: winVNC window during logon"
- In reply to: Lisa: "Is this a hacker?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Peter K. <pmkdatabase@yahoo.ca> Date: Mon, 31 Mar 2003 12:54:52 +0700
http://www.eventid.net/display.asp?eventid=560&source=security+account+manager
Peter
On Thu, 27 Mar 2003 19:32:22 -0800, "Lisa" <grayva@hotmail.com> wrote:
>I keep getting Event ID 560 - Object Access in the
>security event viewer on our Win2k server.
>
>Object Server: Security Account Manager
>Object Type: SAM_SERVER
>Object Name: SAM
>Accessed include: READ_CONTROL, ConnectToServer,
>EnumerateDomains, LookupDomain, DELETE, WRITE_DAC,
>WRITE_OWNER, ReadPasswordParameters,
>WritePasswordParameters, ListAccounts, LookupIDs, and
>others.
>
>These events are always followed by Event ID 562 on the
>same object, Security Account Manager.
>
>Is this a hacker?
- Next message: Kwok Siang Kwang: "EAP-TLS"
- Previous message: Peter K.: "Re: winVNC window during logon"
- In reply to: Lisa: "Is this a hacker?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
