Re: no network access from workstations

From: Steven Umbach (n9rou_at_n0spam-comcast.net)
Date: 02/14/04


Date: Sat, 14 Feb 2004 21:40:18 GMT

Possibly you have a user up to mischief. I would check that the administrators
group on that computer is what you expect and change any administrator passwords
being sure new passwords are complex. Scan the computer with SpyBot Search and
Destroy to make sure no keyboard loggers, etc are installed on it. If you are
using weak passwords and no firewall or misconfigured firewall, this kind of
activity can even come from the internet. You can go to
http://scan.sygatetech.com/ to do a basic firewall vulnerability test. I would
also enable auditing on logon events to see if there is administrator access to
your server when there should not be by viewing the security log in Event
Viewer. See the link below for details. --- Steve

http://support.microsoft.com/default.aspx?scid=KB;en-us;q300958

"Nathaniel" <btaminot@hotmail.com> wrote in message
news:1032201c3f266$130b00a0$a501280a@phx.gbl...
> I have a Windows 2000 server in a peer to peer network.
> The workstations are W2K. Three times in the last six
> weeks or so, I've lost the ability to access the server
> from any pc. In each instance I've had to go to the local
> security policy then user rights assignments and go to the
> setting for "access this computer from the network." All
> three times the groups have been removed and I have to add
> them back. I usually just put the "everyone" and
> the "administrators" group back in. I checked the event
> log and done a virus scan and come up empty. It appears
> to be happening randomly. Does anyone know what could be
> causing this?



Relevant Pages

  • Re: Attempted hacks on my Win 2k Web Server
    ... I highly recommend getting the software firewall ... The administrator and other key passwords are ... > server, unaccessible. ... I may try installing Zone Alarm ...
    (microsoft.public.win2000.security)
  • Re: Network path cannot be found error
    ... >>>this network resource. ... Contact the administrator of this server to find out ... I turned off the firewall on the pc ...
    (microsoft.public.windowsxp.network_web)
  • Re: Event Security
    ... The firewall logs are the first place to look. ... firewall and windows system [ideally using an internet NTP server] and try ... If the user is using IIS to try the passwords, ...
    (microsoft.public.win2000.security)
  • Re: hacking from Terminal services or some other means
    ... If you insist on staying with a personal firewall, ... I would still enable an account lockout policy and change ... the name of the administrator account. ... > Our mail server is running Windows 2000 server. ...
    (microsoft.public.win2000.security)
  • Attempted hacks on my Win 2k Web Server
    ... I have been a standard network admin for 5 years now!) ... I have renamed the Administrator account to a random name and created ... I connect and remote control the server via PCAnywhere and made the ... personal firewall, yet when I restarted the server, I couldn't control ...
    (microsoft.public.win2000.security)