I am working on a Win2K server that is a domain controller and a SQL box. I monitored a good many things but one in particular sticks out. The logon attempts per sec has a average of 1764 and the peak was 40000. This seems odd to me since there is only about 15 users in the office. If anyone can help me makes heads or tales of this that would be greatly appreciated. Thanks!

Does this server have internet access? Do you have a firewall engaged on the server? Is your office behind a router? What account is being logged in the logon error? Liberal: broad-mindedness, person who favors a political philosophy of progress, reform & protection of civil liberties Neocon:someone who believes in America but not in dissent, core of Democracy

Are these actual login attempts or just authentication? It may simply be counting authentication witch can be cause by anything from printing to web browsing to accessing files, etc. Jay

This is a SBS running ISA and a print spooler. These are auth requests from throughout the organization. There is no router since it is acting as a router with ISA. The number just seemed very high to me. Thanks all.