>From: "Onaghise Rotimi" <RONAGH@xxxxxxxxx> >Reply-To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx> >To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx> >Subject: [exchangelist] RE: need help pleaseeeeeeeee >Date: Fri, 11 Jun 2004 12:04:57 -0400 > >http://www.MSExchange.org/ > >Hi Mohammad, > > > >I would start by running a sniffer on the network in order to find out >what is going on. If this is going around and you had a fine >configuration after your migration then why would it start all of a >sudden except for a virus making an ARP request or something? > >First run a sniffer and then if possible try running a virus sweep on >your network. > > > >Goodluck, > >Rotimi > > > >   _____ > >From: Mohammad z al khatib [mailto:mohammadzakariaalkhatib@xxxxxxxxxxx] >Sent: Friday, June 11, 2004 11:39 AM >To: [ExchangeList] >Subject: [exchangelist] need help pleaseeeeeeeee > > > >http://www.MSExchange.org/ > > > > > > > ><http://www.experts-exchange.com/Security/Win_Security/searchPreview.jsp > > > > > >Hi Folks, > >Having a major crisis at the moment. We have implemented a new Windows ><http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> >2k Server ><http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> >domain ><http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> >controller a couple of weeks ago. We have migrated from Winnt and still >have a mix of workstations running Win95,98,2k,XP and 2k Terminal >Server. > >Everything seemed to go well but a few days later I have come across a >serious issue that is driving me up the wall and I can't seem to get to >the bottom of the issue. > >Basically a random account is locking out and when I unlock the user >within seconds the account is locked out again. It happens for quite a >while and some times it moves around at random to other users in the >active directory. Most of the time I re-register the users PC ><http://www.experts-exchange.com/Security/Win_Security/Q_20980373.html> >/Laptop onto the network and it solves the problem however I then >discover that it moves to the next person in the list. I rebooted the >entire network last week after topping up the license manager and it >seemed to solve the problem for a couple of days and then I find that it >has returned with a vengeance. > >I tried rebooting the network again last night as I am starting to get >quite desperate and after coming in this morning I find that the problem >is still with us. I have been off site for most of the day and have >learned that it has made it's way around the list and I am finding the >users are starting to get as annoyed as myself. > >Can anyone shed any light on the subject or give some pointers. I am >vastly becoming behind on my work schedule as I cannot get this issue >resolved. It's fair to say that I am starting to get sleepless nights >over the problem > > > >Thanks. > >Mohammad al khatib > > > > >   _____ > >MSN 8 helps ELIMINATE E-MAIL VIRUSES. ><http://g.msn.com/8HMBEN/2752??PS=47575>  Get 2 months FREE*. >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist >Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp >Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Other Internet Software Marketing Sites: >World of Windows Networking: http://www.windowsnetworking.com >Leading Network Software Directory: http://www.serverfiles.com >No.1 ISA Server Resource Site: http://www.isaserver.org >Windows Security Resource Site: http://www.windowsecurity.com/ >Network Security Library: http://www.secinf.net/ >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this MSEXchange.org Discussion List as: >ronagh@xxxxxxxxx >To unsubscribe visit >http://www.webelists.com/cgi/lyris.pl?enter=exchangelist > > > >------------------------------------------------------ >List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist >Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp >Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ >------------------------------------------------------ >Other Internet Software Marketing Sites: >World of Windows Networking: http://www.windowsnetworking.com >Leading Network Software Directory: http://www.serverfiles.com >No.1 ISA Server Resource Site: http://www.isaserver.org >Windows Security Resource Site: http://www.windowsecurity.com/ >Network Security Library: http://www.secinf.net/ >Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com >------------------------------------------------------ >You are currently subscribed to this MSEXchange.org Discussion List as: mohammadzakariaalkhatib@xxxxxxxxxxx >To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=exchangelist