Re: Hacked? IP address changes in Event Log?

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Scott Harding - MS MVP (scrockel_at_**NO_SPAM**hotmail.com)
Date: 08/04/04


Date: Wed, 4 Aug 2004 09:21:54 -0700

The 169 address space is reserver for AIPA. Automatic Ip addressing. If a
machine is set to DHCP but cannot locate a DHCP server it will assign itself
a 169. something address.

-- 
Scott Harding
MCSE, MCSA, A+, Network+
Microsoft MVP - Windows NT Server
"Phillip Windell" <@.> wrote in message
news:%23eYEAojeEHA.2396@TK2MSFTNGP11.phx.gbl...
> <anonymous@discussions.microsoft.com> wrote in message
> news:c3ea01c47a36$a9de3030$a401280a@phx.gbl...
> > So I guess the answer must be 'NO'. The event log doesn't
> > track who changed the network configs when and from where???
> >
> > Then all I can say is what a huge gaping oversight in lack
> > of security design that presents. You'd think that
> > tracking/auditing any changes in the network configs should
> > be deemed absolutely crucial to minimal fundamental system
> > security.
>
> No,.... with minimal fundemental security it wouldn't have happen to begin
> with.  Minimal fundemental security includes keeping servers in a locked
> room and not letting anyone else know the admin credentials. As I
indicated
> in my other post,..I think this was done by someone who didn't know what
> they were doing by physically sitting at the machine itself and doing it
> manually.
>
> -- 
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>


Relevant Pages

  • Re: Remote Boot Windows XPE?
    ... ones that come with RBS. ... After building XPe images for these machines we ... any DHCP server including the ones resident in $19 cable routers. ...
    (microsoft.public.windowsxp.embedded)
  • RE: DHCP and bad unique id
    ... the it may be doling out 10 IPs for each RAS client. ... The following is from MS 2003 server website. ... Using Routing and Remote Access servers with DHCPThe DHCP Server service can ... When the Routing and Remote Access server starts with the Use DHCP to assign ...
    (microsoft.public.win2000.networking)
  • Re: SBS 2K3 DHCP Server Pooched?
    ... The SBS DHCP Server was never stopped. ... The following problem occurred with the Jet database -1032: ...
    (microsoft.public.windows.server.sbs)
  • Re: DNS issue - clients not registering
    ... DHCP servers and clients can register with DNS to provide ... this update service if the DNS server supports DNS with dynamic updates. ... A Windows 2000 DHCP server can register with a DNS server and update pointer ...
    (microsoft.public.windows.server.active_directory)
  • Re: SBS 2K3 DHCP Server Pooched?
    ... The SBS DHCP Server was never stopped. ... The following problem occurred with the Jet database -1032: ... but something is now wrong with the SBS DHCP server. ...
    (microsoft.public.windows.server.sbs)