Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
admin logs
Name: Ann Date: November 8, 2002 at 08:21:55 Pacific OS: WIN NT CPU/Ram: Pentium 4 256 K
Comment:
Is there any way to check where an admin login came from? We had someone logged on as administrator on our NT network. They deleted the everyone account. We know when it happened but I'd love to be able to track the change to a machine name or IP address. The password had just been changed that day to a secure password so I don't think it was a password compromise. Thanks.
Name: The Prima Donna Date: November 9, 2002 at 09:38:59 Pacific
Reply:
Well An I think you have a challenge her. I don't know how many clients there are but if you login on a client and log off the last name is safed so you could check the clients what the last login name was (administrator) I would advice to never use the administrator + passw ; let the domain admins use their own name and pwd As they are in the domain admin group they have admin rights. I will think about this problem
Summary: Presumably it's all ntfs. So another way - and it doesn't need utils... Install (CD boot or 3 floppies route) a second bare-bones version (apply SP4 or later as well if drive over 7.8/8Gig); install i...
Summary: Possibly: you could run set-up (CD or floppies boot) and opt for a repair - allow it to inspect/repair everything (especially system files) of current installation (if you have the ERD use it). This m...
Summary: This stands for InterProcessCommand (or is Control, I can't remember which...). Effectively it's asking for either an Admin Password, or a valid password and log-in either to access the network and/or...