Nothing is the event log of the machine I identified.
From: Erik Goldoff [mailto:[email protected]] Sent: Tuesday, October 20, 2009 1:04 PM To: NT System Admin Issues Subject: Re: Constantly getting locked of 2003 domain TCP View, and have you checked the event log on the system you've identified ? On Tue, Oct 20, 2009 at 4:00 PM, Jimmy Tran <[email protected]> wrote: Every 5 minutes or so, I get lock out of our domain. I ran EventCombMT and traced it back to a specific machine. Does anyone have any suggestions on what I can do to figure out what program/service is attempting to contact the DC with an incorrect password? I've been dealing with this all morning and it is driving me crazy. Windows 2003 Domain Windows XP SP3 machine Thanks, Jimmy ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
