Re: security log + unauthorized lgons?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

In news:ED3ECA80-16FD-49BA-92FC-AE29364DB157@xxxxxxxxxxxxx,
Dan Shallbetter <DanShallbetter@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
Hello,

Login to my SBS 2003 SP1 premium server remotely and had an
application open on the desktop that I do not recall opening.

Who else besides you has the (or any) admin access/passwords?
Are you using ISA?
Who has physical access to the server?


The
security log shows users Anonymous logon, and administrator logging
in at various times very early in the AM. Not certain if the admin
account login is due to normal maintenance? Is the Anonymous logon
another default account like guest?

Thanks,

Dan

Anonymous is a built-in thing and could show up for a bajillion reasons.
There are different types of logins, tho - interactive ones show up
differently from network access, etc. I get very confused with it all,
frankly, and it makes my head ache. You could check out www.eventid.net for
help - it's a very useful resource.

Change the admin credentials for any account that has any sort of admin
access. Nobody should really be using Administrator for anything; it should
have a very good password on it indeed. And you should set up your own
account with the group membership you need, and use that for admin. And log
in using a different (limited user) account for daily use.


.

Relevant Pages

  • Re: Tough password question!
    ... Windows XP client machine and the admin whose password contains " cannot log ... >> complicated including non-alpha chars to join the domain. ... it will not login when the admin ... >> account and it will login if I change the domain admin password to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain admin login problem
    ... Several Login attempt wrote: ... Administrator Account. ... How can you logon to the DC as a Local Admin? ...
    (microsoft.public.windows.server.active_directory)
  • Re: security log + unauthorized lgons?
    ... I read a best practice white paper once about renaming the admin account. ... security log shows users Anonymous logon, ... account login is due to normal maintenance? ...
    (microsoft.public.windows.server.sbs)
  • Help;using apps across user accounts?
    ... i have recently dont some work on stepping up my XP pro security. ... not all the software which was installed in my admin account is ... settings,next time i login i have to set it up again,it doesnt seem to ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Incoming E-Mail - cant create contact in OU
    ... central admin pool different than the web app. ... that account a little (if the web app is compromised or something, ... So I started with giving the app pool account domain admins permissions then ...
    (microsoft.public.sharepoint.windowsservices)