All user accounts lock out.

  • Thread starter Thread starter William C.
  • Start date Start date
W

William C.

My company has a mixture of Novell & Microsoft NT/2000 servers.
I had enable all the Intruder Detection in all Microsoft servers. I noticed
that servers with internet IP address (resolve from Novell BorderManager
NAT) always have user acounts lock out problem. Anyone knows what could be
the cause?
 
Hello,

Assuming that I am understanding this correctly it appears that someone may
be trying to access your outward facing servers. It sounds like it might be
a form of dictionary attack.

If you collect a network trace of the activity, it might be possible to
trace the source IP address(es) back to the ISP, and report this to them.



Dale Weiss MCSA MCSE CISSP
PSS Security

This posting is provided "AS IS" with no warranties, and confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer. Use of included script samples are subject
to the terms
specified at http://www.microsoft.com/info/cpyright.htm
 
Back
Top