Unathorised AD Use
From: Billy (anonymous_at_discussions.microsoft.com)
Date: 02/18/04
- Next message: Jimmy Andersson [MVP]: "Re: Event ID 1000"
- Previous message: James G.: "Active Directory User Information"
- Next in thread: Ian Baldwin: "Unathorised AD Use"
- Reply: Ian Baldwin: "Unathorised AD Use"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 18 Feb 2004 08:35:27 -0800
Hi all.
I have a strange problem.
I started work at a company a few weeks ago and lets say
its not the best set up company.
Some things have been happening on AD I.E
OU's Added that are slanderous or abusive.
Users being moved.
I have checked all the permissions and even tested logging
on as a user and it cant be done.
Only way i can see is that someone knows the admin
password which i have changed twice. They could log onto
the server through terminal services and change it but
like i said they need admin password or privelages.
I have checked and the groups and members of everyone etc.
They cant do it though MMC unless they have the rights.
I have put some logging on Failed and Sucess Logon
attempts and also started Auditing OU creation and
deletion.
Any one else have any ideas?
- Next message: Jimmy Andersson [MVP]: "Re: Event ID 1000"
- Previous message: James G.: "Active Directory User Information"
- Next in thread: Ian Baldwin: "Unathorised AD Use"
- Reply: Ian Baldwin: "Unathorised AD Use"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
