Re: HelpAssisstant_XXXXXX user created and delete events
From: Sandi - Microsoft MVP (sandi_hardmeier_at_mvps.org)
Date: 05/24/04
- Next message: Kevin Wheeler: "Re: W2k3 security template"
- Previous message: Ron Williams: "HelpAssisstant_XXXXXX user created and delete events"
- In reply to: Ron Williams: "HelpAssisstant_XXXXXX user created and delete events"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 24 May 2004 18:12:37 +0800
Hi Ron,
HelpAssistant can be a legitimate account, it is used during remote
assistance by the invited 'expert' when they connect to your computer during
a remote assistance session. Its used by an administrator to log on and
connect to a computer.
More info here:
300692
http://support.microsoft.com?kbid=300692
If you don't use remote assistance it can be disabled via control panel,
system, remote tab. Turn off the first option to allow remote assistance.
-- Hyperlinks are used to ensure advice remains current _______________________________________ Sandi - Microsoft MVP since 1999 (IE/OE) http://inetexplorer.mvps.org/ Ron Williams wrote: > Hi I have a windows 2003 server with all the security > patches installed, > however i am receiving events in the security log of the > event viewer where a user is created and then deleted. > The new accountname is HelpAssistant_634c49 > and the caller username is machinename$ > Could this server be compromised or is this a normal > behavior caused by some service in windows 2003? > > Regards
- Next message: Kevin Wheeler: "Re: W2k3 security template"
- Previous message: Ron Williams: "HelpAssisstant_XXXXXX user created and delete events"
- In reply to: Ron Williams: "HelpAssisstant_XXXXXX user created and delete events"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
