Re: Please help me!!!

From: Meconceal (Me_conceal_at_hotmail.com)
Date: 09/29/03 

Date: Mon, 29 Sep 2003 10:31:41 -0700

Dear Colin

I do not know if any auditing is enabled. Please suggest
how i can do the same for the future. It would be very
nice if you can help me to prove somthing as it will
really create a badpatch.

Best regards
Meconceal

>-----Original Message-----
>You can't really prove "innocence" only guilt. Did you
have any auditing
>enabled?
>
>--
>Colin M. McGroarty
>MCP+I, MCSE, NT-CIP
>
>Colin@McGroarty.org
>www.McGroarty.org
>
>"meconceal" <me_conceal@hotmail.com> wrote in message
>news:055701c386a9$84361e00$a301280a@phx.gbl...
>> Dear Friends
>>
>> I really need your help. I am not very strong in
Windows
>> 2000.
>>
>> I am working with a small company which is having 20
>> users network last month my boss have gone for
holidays.
>> And today when he come back he is not able to logon to
>> the computer he says that he knows his password well
and
>> there is absolutely no chance that he forget his
>> password.
>>
>> I have check if the account is disabled or blocked but
>> that is also not the case. he is charging on me that i
>> have change his password and check the information by
>> using his account now i want to prove that i am
innocent.
>>
>> Please help me in this case as it is a matter of my job
>> and really i have not done anything with his account.
>>
>> Your earlier guidence is helpful.
>>
>> Best regards
>> MeConceal
>>
>
>
>.
>

Relevant Pages

  • Re: Please help me!!!
    ... Dear Colin ... I do not know if any auditing is enabled. ... >> using his account now i want to prove that i am ... >> Best regards ...
    (microsoft.public.win2000.security)
  • Re: Account Lockout
    ... Enable auditing and look for lockout ... From the lockout events, determine which clients they originate from. ... >>> Do this via a GPO and watch for failed logon attempts. ... I have a user's account that is getting ...
    (microsoft.public.win2000.active_directory)
  • Re: Account Lockout
    ... Enable auditing and look for lockout events. ... >> Do this via a GPO and watch for failed logon attempts. ... I have a user's account that is getting ...
    (microsoft.public.win2000.active_directory)
  • Re: Changed from corporate workgroup to home net, now cannot logon
    ... Colin, thanks again... ... But because the new user account was not set up by the admin ... > I guess you managed to get into the built-in Administrator account and the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Account disapears
    ... This KB explains how to turn on Active Directory auditing in Windows Server ... on the auditing policies for Windows Server 2003 we find the Account ... success events to detect the deletion in Windows 2000. ...
    (microsoft.public.win2000.active_directory)