outgoing login attempts
We have a server 2003 box that we are using for high-speed data collection. We are not using it as a server, and it is not in a domain. Updates are current.
Most days, when certain users log in (admin and non-admin), it sometimes sends multiple outgoing login attempts to another particular server on our company network. (All of the attempts fail because the usernames do not exist on the remote server.)
It seems to have something to do with printing to network printers (connected via IP) but not always.
There are no entries in our log for the attempts.
SAV does not detect any malware.
Any ideas?
May 21st, 2012 3:11pm
You might try net use * /d /y to remove all network connections to rule this out.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2012 3:18pm
You might try net use * /d /y to remove all network connections to rule this out.
Regards, Dave Patrick ....
Microsoft Certified Professional
Microsoft MVP [Windows]
Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
May 21st, 2012 3:24pm
Hello,
Could it be that certain Terminal Service related policy has been applied to affected users on this server 2003 box so that they automatically send out the RDP attempts when they login? Run
gpresult h gpreport.html to create a report file and check. The report file is created under your profile folder.
Thanks
Zhang
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2012 11:08pm
Hello,
Could it be that certain Terminal Service related policy has been applied to affected users on this server 2003 box so that they automatically send out the RDP attempts when they login? Run
gpresult h gpreport.html to create a report file and check. The report file is created under your profile folder.
Thanks
Zhang
May 21st, 2012 11:15pm
Did you tested it with all redirection at off in the RDP client ? (to not bring share, printer and such)
Other question, do you can reset the user profile on that server ? (in exemple, To reset like a network drive mapped and that was selected to be re-mapped at next logon)MCP | MCTS 70-236: Exchange Server 2007, Configuring
Free Windows Admin Tool Kit Click here and download it now
May 21st, 2012 11:41pm
Did you tested it with all redirection at off in the RDP client ? (to not bring share, printer and such)
Other question, do you can reset the user profile on that server ? (in exemple, To reset like a network drive mapped and that was selected to be re-mapped at next logon)MCP | MCTS 70-236: Exchange Server 2007, Configuring
May 21st, 2012 11:47pm