Re: Abundance of faulure notices in event viewer..

From: Dolemite (yomama_at_nospam.com)
Date: 06/06/03 

Date: Thu, 5 Jun 2003 19:07:15 -0700

If this is indeed the case, bump up the auditing levels remotely on the DC's
and clients so you can catch him in the act.

"Steven L Umbach" <sumbach@ameritech.net> wrote in message
news:R4SDa.802$87.321693@newssrv26.news.prodigy.com...
> Yeah, sounds to me like someone is trying to hack your network by
> attempting to gain administrator access to your servers. Look to see if
any
> of the machine names look familiar, otherwise it may be coming from the
> internet. If you have internet access you may want to check that your
> firewall is properly configured. -- Steve
>
> http://scan.sygatetech.com/
>
> "David" <dahaselh@charter.net> wrote in message
> news:04cc01c32bb7$ec7620c0$a601280a@phx.gbl...
> > I'm sure it's just a setting I haven't set someplace but
> > on every one of my 2000 servers the security event viewer
> > is full of failure notices. This happens on domain
> > controllers, exchange, fileservers. Although I have these
> > failure notices I have had no problems from any users
> > accessing files or mail. I've looked up the error code
> > and it states that it's an invalid password. Any idea
> > what i'm missing here?
> >
> > The logon to account: Administrator
> > by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
> > from workstation: ADM-DH
> > failed. The error code was: 3221225578
>
>

Quantcast