2000Server hangs at midnight - how to track a bug

  • Thread starter Thread starter ML
  • Start date Start date
M

ML

Dear members,

it happened three times our Win 2000 Srv SP 4 + Hotfixes hanged
a minute or two about midnight. In the morning I could see
only non responding desktop, only hard reboot was possible,
and in System Log I find that the system was improperly
shut down a minute or two about midnight. I suspect it is
a kind of attack, but how to track it?

System is DC and Exchange Server too.
It seems that the system itself is clean, AV and anti-trojan
software did not discover anything.

Regards
Thank You i advance
Michal Leder
 
U may follow NIST recommendations on Excahnge server wch can be downloded from www.nist.go
to help harden the OS and MSX. THen u may want to correlate logs from IDS / fwall, also run IIS lockdown tool
Remember Security is not just tech but a Process in itself which needs a structured approach
JC
 
Back
Top