Re: All user account locked
From: Ken Schaefer (kenREMOVE_at_THISadOpenStatic.com)
Date: 03/28/04
- Previous message: Ken Schaefer: "Re: What is a local logon?"
- In reply to: Ron King: "Re: All user account locked"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 28 Mar 2004 22:19:30 +1000
I would question how the virus was able to enumerate a list of user accounts
in your domain. What are your RestrictAnonymous settings? Perhaps moving
from 0 (allow enumeration of shares & users) to 1 (allow enumeration of
shares) would be helpful?
Cheers
Ken
"Ron King" <montyboy@earthlink.net> wrote in message
news:%23o82zyqEEHA.3372@TK2MSFTNGP10.phx.gbl...
: OK, I found the problem. A remote user had brought in there home computer
: because it was not performing well. The lock outs occured about 5
minutes
: after this computer was added to our physical network. The problem went
: away as soon as we removed the computer for the network. I assume it is a
: virus and will let everyone know what I learn after the virus scan is
: complete.
:
: Ron King
: CCSI
:
: "Ron King" <montyboy@earthlink.net> wrote in message
: news:uMLu0CqEEHA.4080@TK2MSFTNGP09.phx.gbl...
: > Hi,
: > I hope someone can help or give me some idea as to what is going on.
: > When I returned from my lunch today, I found every user account on our
: > domian, excluding Administrator, locked out. How can this happen and
what
: > can I do to prevent it from happening again? An occassional locked
: account
: > is normal, but to find every user account on the domain locked leads me
to
: > believe something fishy is going on, so any ideas would be greatly
: > appreciated.
: >
: > Ron
: > CCSI
: >
: >
:
:
- Previous message: Ken Schaefer: "Re: What is a local logon?"
- In reply to: Ron King: "Re: All user account locked"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
