username being deleted from server

[Pedro]

I was wondering if someone has experienced this before.

We have a windows2000 server not joined in a domain and
for some weird reason user's login account are being
deleted.

 

[Steven Umbach]

Make sure while unplugged from the network that you check membership of the
local administrators group to see if it looks correct and then change any
administrators passwords to something complex. Run a virusscan with latest virus
definitions on it. Making sure it is protected by a firewall if internet access
is available on the network, plug it back into the network and install all
critical updates. Then enable auditing for logon events and account management.
Any changes to accounts will be recorded in Event Viewer/security log unless
someone with administrator privileges deletes the entries which in itself would
generate an event in the security log. --- Steve