Security log failure audit

[tec_nickel]

guest workgroup PCs running XP attached to network
attempting logon to domain PCs. Appear to be trying all
available local profiles to logon to domain. Is this part
of auto find in XP that tries to find all available shared
resources or something more ominous? Any ideas...?

 

[Roger Abell]

There are many "tools" that attempt to guess passwords
using remote connection attempts. If you are seeing this
happen with the real accounts then you definitely need to
review guides on hardening Windows; specifically in this
case see info on setting your domain controllers to not allow
null session enumeration of the SAM lists of users and groups.