Logon failures filling the event log



Hi Everyone

Running Small Business Server 2003 Premium at the moment as our office
file and Exchange server.

Just got back from vacation and the last two days the event logs have
been filled with failed logon attempts (really nice to come back and
see the server performance report telling my 7676 critical errors!).

Logon Failure:
Reason: Unknown user name or bad password
User Name: zackary
Domain:
Logon Type: 3
Logon Process: Advapi
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: [SERVERNAME]
Caller User Name: [SERVERNAME]$
Caller Domain: [MYDOMAIN]
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1732
Transited Services: -
Source Network Address: -
Source Port: -

So someone is trying to poke holes in our server? I also notice that
the Guest account has been locked out (I've now disabled it).

Do I need to worry? I'm confident that all my users have strong
passwords. Anything I can do to stop this? Or should I just ignore it?

Many thanks in advance for any advice or comments.

Cheers, Richard

.



Relevant Pages


Loading