outgoing login attempts
We have a server 2003 box that we are using for high-speed data collection. We are not using it as a server, and it is not in a domain. Updates are current. Most days, when certain users log in (admin and non-admin), it sometimes sends multiple outgoing login attempts to another particular server on our company network. (All of the attempts fail because the usernames do not exist on the remote server.) It seems to have something to do with printing to network printers (connected via IP) but not always. There are no entries in our log for the attempts. SAV does not detect any malware. Any ideas?
May 21st, 2012 3:11pm

You might try net use * /d /y to remove all network connections to rule this out. Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows] Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2012 3:18pm

You might try net use * /d /y to remove all network connections to rule this out. Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows] Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
May 21st, 2012 3:24pm

Hello, Could it be that certain Terminal Service related policy has been applied to affected users on this server 2003 box so that they automatically send out the RDP attempts when they login? Run gpresult h gpreport.html to create a report file and check. The report file is created under your profile folder. Thanks Zhang
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2012 11:08pm

Hello, Could it be that certain Terminal Service related policy has been applied to affected users on this server 2003 box so that they automatically send out the RDP attempts when they login? Run gpresult h gpreport.html to create a report file and check. The report file is created under your profile folder. Thanks Zhang
May 21st, 2012 11:15pm

Did you tested it with all redirection at off in the RDP client ? (to not bring share, printer and such) Other question, do you can reset the user profile on that server ? (in exemple, To reset like a network drive mapped and that was selected to be re-mapped at next logon)MCP | MCTS 70-236: Exchange Server 2007, Configuring
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2012 11:41pm

Did you tested it with all redirection at off in the RDP client ? (to not bring share, printer and such) Other question, do you can reset the user profile on that server ? (in exemple, To reset like a network drive mapped and that was selected to be re-mapped at next logon)MCP | MCTS 70-236: Exchange Server 2007, Configuring
May 21st, 2012 11:47pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics