Re: Can users that reboot a server be tracked?

From: someoneelse (iheard_at_you.com)
Date: 05/20/04

  • Next message: S. Pidgorny : "Re: where to put SQL Server ?"
    Date: Thu, 20 May 2004 17:47:40 -0400
    
    

    sorry, read this one first:

    http://www.thawte.com/news/april2004/sslwarning.html

    I was implying perhaps it was this security release, but realised that last
    link I sent didn't have the text above.

    "cfanetworks" <cfa@cfanetworks.com> wrote in message
    news:uHdFvpDPEHA.2960@TK2MSFTNGP10.phx.gbl...
    > I have 2 servers in the domain that are rebooting for some unknown reason.
    > I need to find a way to track what user is rebooting the server. It does
    > not reboot over the weekend so I am assuming that there is a user
    > maliciously rebooting the server. Can it be tracked?
    >
    > Jon Skelley
    >
    >


  • Next message: S. Pidgorny : "Re: where to put SQL Server ?"

    Relevant Pages

    • Re: HELP! Ive been had! Someone hacked into my Linux box. What now?
      ... server that is using a default sshd configuration. ... As of now it is still rebooting at 9:00 AM. ... been "rootkitted" (the standard way of hijacking a server). ... Rootkits ...
      (comp.os.linux.security)
    • Re: Troubleshoot Failing Clients Internet Connection
      ... rebooting no problems with clients connecting to the interner on Tuesday and ... I plan to remove the card this weekend. ... How many nics in your SBS server? ... Internet when they first logon in the morning. ...
      (microsoft.public.windows.server.sbs)
    • Re: save and sound operating system
      ... One is a short-term solution. ... totally automatically, just rebooting a workstation ... but a stand-alone server (especially Web ... operating system. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: POSTPONING REBOOT AFTER INSTALLING UPDATES
      ... server should be restarted immediately after applying an update. ... himself in a position as IT director of a law firm employing over 300 people. ... applying updates without rebooting is ok. ... immediately after installing updates. ...
      (microsoft.public.windowsupdate)
    • Problem with fsck on solaris
      ... After aplying the latest patch bundle from sun on a server ... here is the message I get when rebooting the server. ... Copyright 1983-2003 Sun Microsystems, Inc. ... Bus Error - core dumped ...
      (comp.unix.solaris)