HelpAssisstant_XXXXXX user created and delete events

From: Ron Williams (ron_at_email.com)
Date: 05/24/04

  • Next message: Sandi - Microsoft MVP: "Re: HelpAssisstant_XXXXXX user created and delete events" 
    Date: Mon, 24 May 2004 11:10:49 +0300

    Hi I have a windows 2003 server with all the security
    patches installed,
    however i am receiving events in the security log of the
    event viewer where a user is created and then deleted.
    The new accountname is HelpAssistant_634c49
    and the caller username is machinename$
    Could this server be compromised or is this a normal
    behavior caused by some service in windows 2003?

    Regards

  • Next message: Sandi - Microsoft MVP: "Re: HelpAssisstant_XXXXXX user created and delete events"

    Relevant Pages