Logon failures filling the event log
- From: the_nextman <richard.markiewicz@xxxxxxxxxxxx>
- Date: Tue, 21 Aug 2007 09:37:10 -0000
Hi Everyone
Running Small Business Server 2003 Premium at the moment as our office
file and Exchange server.
Just got back from vacation and the last two days the event logs have
been filled with failed logon attempts (really nice to come back and
see the server performance report telling my 7676 critical errors!).
Logon Failure:
Reason: Unknown user name or bad password
User Name: zackary
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: [SERVERNAME]
Caller User Name: [SERVERNAME]$
Caller Domain: [MYDOMAIN]
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1732
Transited Services: -
Source Network Address: -
Source Port: -
So someone is trying to poke holes in our server? I also notice that
the Guest account has been locked out (I've now disabled it).
Do I need to worry? I'm confident that all my users have strong
passwords. Anything I can do to stop this? Or should I just ignore it?
Many thanks in advance for any advice or comments.
Cheers, Richard
.
- Follow-Ups:
- Re: Logon failures filling the event log
- From: Freaky
- Re: Logon failures filling the event log
- Prev by Date: Re: Problems adding a File Server to SBS-2003 ...
- Next by Date: Re: Monitoring RWW logins
- Previous by thread: Re: Problems adding a File Server to SBS-2003 ...
- Next by thread: Re: Logon failures filling the event log
- Index(es):
Relevant Pages
|
Loading