Well, I have a commitment tonight so I've temporarily employed a non-solution solution I found suggested. I've set my lock outs to expire after 11 minutes. So, at least the locks will be released and my users will be able to connect (I hope).
I'll check on it when I get home and have access and see how it's going. Haven't had any events since 10:00am MDT so maybe they've given up (at least for now). ~Katie -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Katie La Salle-Lowery Sent: Friday, June 13, 2003 6:15 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Hmm...I didn't see your post about IP's. And, I'm not seeing IP's. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Fitscape.com Internet Relations Sent: Friday, June 13, 2003 6:06 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Forget the machine names - they can be bogus and/or changed. What u need to do is look @ the IP's like I said in my previous post. Bryan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Katie La Salle-Lowery Sent: Friday, June 13, 2003 4:53 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Looks like. It's got the right uid's but wrong passwords. After five failed attempts, the account is locked out. One of the machine names was familiar to us--a commercial customer on our wireless network. We asked them to check that machine. I suspected it was infected with a trojan. They just called back. That looks like a good possibility for that machine. However, there have been 3 different machine names we've found--on different networks. ~Katie -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 13, 2003 5:50 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Password cracking program running? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > [EMAIL PROTECTED] On Behalf Of Katie La Salle-Lowery > Sent: Friday, June 13, 2003 4:33 PM > To: [EMAIL PROTECTED] > Subject: [IMail Forum] OT; user accounts getting locked out en masse; process is > ksecdd > > Hi All, > > Just cuz you're such an broadly experienced group I'm going to pose my > problem of the day: > > My User Accounts (Windows network) are getting locked out en masse. > Event viewer shows failed login attempts using process ksecdd. > > I'm Googling my little heart out but if anyone in this knowledgable > group has any insight, I'd be in their debt. > > Thanks, > Katie > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
