Re: Event log error? Please help

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance


Hi Eric,

Thanks for your reply.

The behavior may happen when the users have input wrong username or
password. Since the situation only occurs in work day, it should not be
caused by network hackers. In addition, the frequency of the event is not
high, so, it is normal, you need not to worry about it. If you still have
concerns about security, you may try to enhance the security of the network
as following:

1. Scan virus on the workstations. Please use the anti-virus software to
perform full scan on the internal workstations. There is an online virus
scan link below:
http://housecall.trendmicro.com

2. Implement Strong password policies. Open 'Server Management console',
navigate to Users snap-in. In the right panel, click 'Configure Password
Policies'. Enable the password policies.

For more information:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/
security/bpactlck.mspx

3. Monitor the internal users to see if anyone is testing the admin
accounts.

More info:

Securing Your Windows Small Business Server 2003 Network
http://download.microsoft.com/download/1/f/1/1f15a874-f696-4992-b5ad-b1e7b25
8de1c/SecuringSBSnetwork.doc

4. Protect your Exchange Server,

Exchange Server 2003 Security Hardening Guide
http://www.microsoft.com/downloads/details.aspx?FamilyID=6A80711F-E5C9-4AEF-
9A44-504DB09B9065&displaylang=en

Hope the information help.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Eric Crozier" <eric.a.t.rssystems.co.uk>
| References: <#bJDH8aSFHA.1476@xxxxxxxxxxxxxxxxxxxx>
<OqNfa9iSFHA.14784@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Event log error? Please help
| Date: Tue, 26 Apr 2005 11:18:37 +0100
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi, Thanks for your response
|
| It seems to be only when there is users on the system, at the weekend
there
| is no errors at all.
|
| Regards
|
| Eric
|
|

.

Relevant Pages

  • Re: Suggestion on setup
    ... There is an existing network and domain, ... to be transfered from the front end exchange server to our back end ... the parent company server destined for your own users, ... company.com for security reasons. ...
    (microsoft.public.windows.server.setup)
  • RE: Occasional Event ID 529 messages
    ... Thank you for posting to the SBS Newsgroup. ... I understand that you got Event ID 529 in Security log sometimes, ... suggestions to improve the network security: ... Configure Password Policies and configure the password policies. ...
    (microsoft.public.windows.server.sbs)
  • Re: WK2 AD Security
    ... > security what so ever and my responsibility is to change that. ... password policies should correspond to /that/ list, ... you can maybe arrange users and computers into various ... On an already established network which you presumably don't want to disrupt ...
    (microsoft.public.win2000.security)
  • Re: Hiding internal Exchange server IP/name
    ... reasons it would be preferred to not expose this information to the the ... Internet including the name IP of the Exchange server. ... it's adding something to security, but if anyone penetrated far enough ... the network and everything in it. ...
    (microsoft.public.exchange.admin)
  • Re: Exchange server on different subnet from LAN
    ... Should we put our exchange server on a different subnet ... Putting it on a different subnet has got nothing to do with security ... that mast anything between 1.1 and 1.254 are on the same network. ...
    (microsoft.public.exchange.setup)