Security log failure audit

  • Thread starter Thread starter tec_nickel
  • Start date Start date
T

tec_nickel

guest workgroup PCs running XP attached to network
attempting logon to domain PCs. Appear to be trying all
available local profiles to logon to domain. Is this part
of auto find in XP that tries to find all available shared
resources or something more ominous? Any ideas...?
 
There are many "tools" that attempt to guess passwords
using remote connection attempts. If you are seeing this
happen with the real accounts then you definitely need to
review guides on hardening Windows; specifically in this
case see info on setting your domain controllers to not allow
null session enumeration of the SAM lists of users and groups.
 
Back
Top