HelpAssisstant_XXXXXX user created and delete events
From: Ron Williams (anonymous_at_discussions.microsoft.com)
Date: 05/21/04
- Next message: Ryan: "My computer has locked me out"
- Previous message: Joe Richards [MVP]: "Re: Hot to change locked computer message"
- Next in thread: techguru100: "HelpAssisstant_XXXXXX user created and delete events"
- Reply: techguru100: "HelpAssisstant_XXXXXX user created and delete events"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Fri, 21 May 2004 07:18:40 -0700
Hi I have a windows 2003 server with all the security
patches installed,
however i am receiving events in the security log of the
event viewer where a user is created and then deleted.
The new accountname is HelpAssistant_634c49
and the caller username is machinename$
Could this server be compromised or is this a normal
behavior caused by some service in windows 2003?
Regards
- Next message: Ryan: "My computer has locked me out"
- Previous message: Joe Richards [MVP]: "Re: Hot to change locked computer message"
- Next in thread: techguru100: "HelpAssisstant_XXXXXX user created and delete events"
- Reply: techguru100: "HelpAssisstant_XXXXXX user created and delete events"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|