Re: Getting Hacked

From: JBK (jbk_at_techsoeasy.com)
Date: 04/28/04 

Date: Wed, 28 Apr 2004 10:07:58 -0700

Is there any reason you can't change the "login" name for
the administrator? (on the ACCOUNT) tab of the user
properties.

>-----Original Message-----
>How do I change the lock setting to a maunual unlock etc
>>-----Original Message-----
>>I require 3-factor passwords of 8 or more characters,
>and I have lockout set
>>for 10 bad passwords in an hour, with manual unlock
>required. Before SUS, I
>>used to lock myself out every time I went from
>workstation to workstation
>>installing patches, but other than that, I haven't had
>any problems with
>>lockout.
>>
>>The Administrator account can't be locked out by
>default, although there's a
>>resource kit tool to allow it. I like the idea of a
>very strong
>>administrator password instead, and/or a renamed account.
>>
>>
>>"Les Connor [SBS MVP]" <les.connor@DEL.cfive.ca> wrote
>in message
>>news:%23r2omG0FEHA.3064@tk2msftngp13.phx.gbl...
>>> Hi Kevin,
>>>
>>> Nothing you can do about it, except ensure that
>passwords are strong.
>>>
>>> --
>>> Les Connor [SBS MVP]
>>> -------------------------------------
>>> SBS Rocks !
>>>
>>>
>>>
>>> "Kevin Gal" <anonymous@discussions.microsoft.com>
>wrote in message
>>> news:138b801c4173a$8ae91690$a601280a@phx.gbl...
>>>> Hi almost every night I getting reports that "people"
>are
>>>> trying to log on to my server. They seem to always try
>>>> and use either the guest (diasbled) or the
>administrator
>>>> user name. Should I change or disable the
>Administrator
>>>> user account. Thanks Kevin
>>>
>>>
>>
>>
>>.
>>
>.
>

Relevant Pages

  • Re: User Activities
    ... The only logs I mentioned were the event logs (they can be found in the ... When you refer to "the system administrator ID", ... administrator account, or the administrator account local to the machine ... "through their workstation": how did they do that, ...
    (microsoft.public.windows.server.security)
  • Re: User Activities
    ... Why don't you tell us where domain server saves the logs? ... When you refer to "the system administrator ID", ... administrator account, or the administrator account local to the machine ... As I see it, then, the perpetrator logged into workstation "A" using ...
    (microsoft.public.windows.server.security)
  • The local policy of this system does not permit you to logon interactively
    ... workstation administrator rights. ... computer joins a domain - the domain administrator becomes ... the local administrator has logon rights to the sytem. ... > administrator account nor with my alternative account ...
    (microsoft.public.win2000.security)
  • Re: User Activities
    ... When you refer to "the system administrator ID", ... administrator account, or the administrator account local to the machine ... As I see it, then, the perpetrator logged into workstation "A" using account ... local admin on a server or workstation, ...
    (microsoft.public.windows.server.security)
  • Re: am i being hacked?
    ... Dave Nickason [SBS MVP] wrote: ... account will not lock out by default. ... The administrator can not be locked out from the console. ... Given that your administrator account should lock after a few failed ...
    (microsoft.public.windows.server.sbs)