 |
 |
This sounds like some other attacks that we have been seeing lately. If you find good log information, please let me know. Joe Budzyn -- Joe Budzyn [log in to unmask] 301 Computer Center Ph: (517) 355-4500 x162 Michigan State University East Lansing, MI 48824 On Sat, 9 Mar 2002, Gordon Williams wrote: > Thanks for the suggestion, Firm. This product seems to replace the > admin account password (assuming PW is not known). > > Our situation is different... we know the passwords of the various > admin accounts -- but ALL accounts with admin privs have been locked > out (on 6 NT4 servers in 3 different domains plus 2 W2K standalone > servers). > > What we need is a utility to go in and UNLOCK the admin accounts. > Any suggestions? > > Currently, we have no access to these 8 servers (no admin access). > This appears to have happened on all 8 servers between 8 am on > Thursday & 8 am on Friday. > > Gordon > > ----- > "Charlot, Firmin" wrote: > > > > Fred, > > There is a tool out there that allows you to reset admin pws. It's about > > $70.00. I have used the demo version and it found the admin id even if it > > was renamed. > > Go to http://www.sunbelt-software.com/product.cfm?id=265 > > > > Firmin Charlot > > AIS > > [log in to unmask] > > > > -----Original Message----- > > From: Fred Ododa [mailto:[log in to unmask]] > > Sent: Saturday, March 09, 2002 3:55 PM > > To: [log in to unmask] > > Subject: Account Lockout!!! > > > > Admins, > > > > Has anyone stumbled on this kind of situation??? > > Yesterday, we discovered that all the accounts in the admin group had a > > LOCKOUT, such that none of the admins can login to the server. > > The affected servers are WinNT4 servers which are in different domains and > > also some Win2K standalone servers all are at Olin health center, none of my > > servers at Student services are having this problem. > > > > The only account that is not locked is the one that is not on the admin > > group - therefore has limited functuinality. Unfortunately the lockout reset > > duration on this servers were set to forever (only be unlocked by an admin). > > > > Is there a way of reseting the account to enable us login. > > > > Please HELP HELP HELP!!! > > > > -- > > > > Fred Ododa, MCSE,CNA > > Network Administrator > > Counseling Center > > Michigan State University > > Phone: (517) 355-8270 > > Fax: (517) 353-5582 > > Email: [log in to unmask] > > > > -- > -- Joe Budzyn [log in to unmask] 301 Computer Center Ph: (517) 355-4500 x162 Michigan State University East Lansing, MI 48824