Re: Event ID 681 in Security Log
From: Drew Cooper [MSFT] (dcoop_at_online.microsoft.com)
Date: 01/07/04
- Previous message: Jennie Dawkins: "RE: Cannot gain acces over network"
- In reply to: Calvin: "Event ID 681 in Security Log"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 7 Jan 2004 13:29:17 -0800
Where are they trying to log on from? Can you block the traffic with a
firewall? Or can you track it to a machine on your network?
It might be benign - maybe some service that was trying to do something
legitimate has an expired password. (I'm not suggesting you *assume* it's
benign, of course.)
Account lockout would keep someone from logging on with the account. The
best solution to attacks against users' passwords is to make sure that users
have strong passwords.
-- Drew Cooper [MSFT] This posting is provided "AS IS" with no warranties, and confers no rights. "Calvin" <yihsinchang@hotmail.com> wrote in message news:OrrB7U60DHA.2412@TK2MSFTNGP10.phx.gbl... > We keep getting event 681, account logon failure event. (error code: > 3221225578). > I believe some intruders are running batch to guess our users' password. How > do I prevent it? > Thanks > Calvin > >
- Previous message: Jennie Dawkins: "RE: Cannot gain acces over network"
- In reply to: Calvin: "Event ID 681 in Security Log"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
