Logon attempts from the net (hackers)

[MRG]

Hi, I have turned on account logon/logoff auditing as my
user accounts keep locking out. I have found that logon
attempts are being made (presumably from the Internet) but
I don't know how to stop them. I have Norton Personal
Firewall installed and the windows XP firewall enabled on
my broadband connection. I have XP pro and although this
is the 2k group, I had the same problem with 2k and cannot
remember the fixes, but everyone was really helpful. I am
unable to
run the security checker at symantec.com/securitycheck as
it is running very very slowly and keeps timing out.
(because of the number of people using it in the midst of
blaster I guess) so I cannot find which ports are open, if
any? I have disabled file and printer sharing on the
network adapter for the broadband. (infact only tcp/ip is
installed)

Any ideas?


Thanks

Chris

 

[MPilgrim]

First you should rename your user accounts to something
off the wall. The Administrator account it the first
thing anyone ever goes after. Once you rename your
accounts if your account continues to get locked out
download Microsoft's Account Lockout and Management Tools
to assist you in finding which process is trying to lock
the account. Be sure to check all services to see if they
may be running as your account that keeps getting locked
out.