how to stop hacking on my server
- From: "jose" <pepa@xxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Tue, 6 Nov 2001 06:28:20 +0100
hi,
every time at event log on sbs2000 server i have following messages
Event Type: Success Audit
Event Source: Security
Event Category: Policy Change
Event ID: 617
Date: 6.11.2001
Time: 3:40:29
User: NT AUTHORITY\SYSTEM
Computer: SERVER
Description:
Kerberos Policy Changed:
Changed By:
User Name: SERVER$
Domain Name: NET2000FAQ
Logon ID: (0x0,0x3E7)
Changes made:
('--' means no changes, otherwise each change is shown as:
<ParameterName>: <new value> (<old value>))
--
ISA server is configured in secure mode
I cannot found ip addres of hacker
can anyone help me?
Josef Kovar
Other related posts: