I am seeing lots of security event ID's 529 Logon/Logoff on our exchange
2000 server. They look like other mail servers. Is this typical of an
established SMTP connection between 2 servers, or a hacking attempt?
Logon Failure:
Reason: Unknown user name or bad password
User Name: CORESMTP1$
Domain: EX
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: CORESMTP1
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
