|
Somones trying to logon to computer over network
|
Dave
dgoold@earthlink.net
09/08/03
|
At work I have several NT workstation in my department that I’ve set up security auditing of logons. Some of them logon to NT domain and some logon to Novell server and or both. Upon viewing logs they showed that they are being attempted to be logged on from other computers on network. When I first reported to MIS department they told me that this was from computers that are infected with virus and needed to be shut down and cleaned of virus. After further scrutinizing I noticed that this continued hundreds of time and were trying to logon with administrator account that I have changed its user name. I also never have logged in to these computers using this account over the network. Most of the computers that have attempted to logon to my NT computers have been higher-level employees; such as vice presidents or directors. Could this be a virus, Trojan or hacker that have compromised other system and network from internal or external and which one most likely.
|
mikeyB
n/a
09/09/03
|
it is possible that a virus is to blame,
Q. do these senior employees use laptops? different to the NT Desktops you are talking about? The laptops may have some dialin settings enabled that allowes hackers or viruses to piggyback the network via the laptop and then try to access the network on the desktop environment.
Or you could risk your job and go accusing senior executives of hacking into their own network ?? - what the hell for ! - cant see a motive here, If i were you i would be looking elsewhere.
Regards
MikeyB
|
