any windows server admins? - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 04-24-2007, 08:50 AM   #1 (permalink)
Junior Techie
 
Join Date: Jan 2005
Posts: 74
Default any windows server admins?

Having a small problem here....

Accounts are being locked out on a server due to too many invalid login attempts.

The thing is - the users aren't really trying to log in. Something on our laptop is doing it automatically and we can't figure out how to stop it!

From the security event log:

Logon Failure:
Reason: Unknown user name or bad password
User Name: bill.user
Domain:
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: BILLSLAPTOP

Note: We do not use Active Directory nor a domain controller. The OS is Windows 2000 Server.

It seems to only be happening on one machine, which happens to be our main web server.

Virus scans aren't showing anything. One person's laptop is trying to login every 5 minutes on the dot. Others are more random.

I have tried Googling the NtLmSsp and NTLM, but not having any luck resolving the issue. Anyone?
__________________

Nyper is offline  
Old 04-24-2007, 09:00 AM   #2 (permalink)
True Techie
 
Silverlord's Avatar
 
Join Date: Nov 2006
Posts: 157
Default Re: any windows server admins?

So your users log in locally and have access to a domain controller to use files? Or they go on internet explorer and use the web server interface?
__________________

Silverlord is offline  
Old 04-24-2007, 09:03 AM   #3 (permalink)
Junior Techie
 
Join Date: Jan 2005
Posts: 74
Default Re: any windows server admins?

Sorry for the lack of explanation. We simply log in through remote desktop when we need access to the server (very limited # of users for this server). We are finding that when we try to log in, we are told our accounts are locked out. So we log in as Administrator, take a look at the logs... and that's what I posted above.

Thanks for your help.
Nyper is offline  
Old 04-24-2007, 09:09 AM   #4 (permalink)
True Techie
 
Silverlord's Avatar
 
Join Date: Nov 2006
Posts: 157
Default Re: any windows server admins?

Download network monitor and look for login events.. Also it will show you what connections are going into the server.
Silverlord is offline  
Old 04-24-2007, 09:15 AM   #5 (permalink)
Repeat Offender
 
superdave1984's Avatar
 
Join Date: Aug 2006
Location: South Fulton, TN
Posts: 1,980
Default Re: any windows server admins?

You might have a DOS attack going on.
__________________
Change the world. Of one person. Today.

If your equation requires either a complex combination of variables to get the desired result OR you can't seem to get the result regardless of the variables....it ain't your variables, it's your constant.
superdave1984 is offline  
Old 04-24-2007, 09:55 AM   #6 (permalink)
Junior Techie
 
Join Date: Jan 2005
Posts: 74
Default Re: any windows server admins?

Have scanned our laptops with two or three different anti-virus & spyware programs. Nothing is showing up. It's really driving me bananas...
Nyper is offline  
Old 04-24-2007, 10:00 AM   #7 (permalink)
True Techie
 
Silverlord's Avatar
 
Join Date: Nov 2006
Posts: 157
Default Re: any windows server admins?

Hence download network monitor it will tell you what/who is doing this to your server
Silverlord is offline  
Old 04-24-2007, 10:34 AM   #8 (permalink)
Junior Techie
 
Join Date: Jan 2005
Posts: 74
Default Re: any windows server admins?

Welp.. we're getting it narrowed down now.

The invalid login occurs everytime we try to check our email. This server is also our mail server.

It is happening to 3 of us here, and all 3 of us are running Outlook 2007. We all have different anti-virus software. We have disabled that and the problem still occurs.

Outlook is the devil...

Another employee is also running Outlook 2007 and NOT having this issue. What in the world.... ?
Nyper is offline  
Old 04-24-2007, 11:15 AM   #9 (permalink)
Junior Techie
 
Join Date: Jan 2005
Posts: 74
Default Re: any windows server admins?

New progress.

The reason it throws an invalid login in the event viewer for some users and not others is because....

For all users, their user name on the server (for remote desktop, etc) is the same as their user name for the mail server (POP3).

For some of us, the two passwords are different. For those of us who use different passwords, it throws an invalid login. Why the heck would that be related locking out the user account on the machine when we are only trying to check email? That's silly as ****!
Nyper is offline  
Old 04-24-2007, 11:35 AM   #10 (permalink)
Repeat Offender
 
superdave1984's Avatar
 
Join Date: Aug 2006
Location: South Fulton, TN
Posts: 1,980
Default Re: any windows server admins?

Quote:
Originally Posted by Nyper View Post

Outlook is the devil...
Could be worse. We have to use Lotus Notes.
__________________

__________________
Change the world. Of one person. Today.

If your equation requires either a complex combination of variables to get the desired result OR you can't seem to get the result regardless of the variables....it ain't your variables, it's your constant.
superdave1984 is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
windows xp file sharing coolray Microsoft Windows and Software 3 01-06-2008 06:08 PM
Windows Vienna (Blackcomb) mssssee2 Microsoft Windows and Software 16 09-23-2007 03:57 AM
Windows Home Server CTP Released Osiris Microsoft Windows and Software 0 04-19-2007 08:08 AM
Windows Home Server SDK Available Osiris Microsoft Windows and Software 0 04-05-2007 11:21 PM
Windows 2003 configure as a mail server , how many email accounts can handle zillah Microsoft Windows and Software 1 03-28-2007 01:11 AM



Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 09:50 AM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.