|
Home > Archive > 70-216 > November 2002 > W2K server being sneaked?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
W2K server being sneaked?
|
|
| supergoku0 2002-11-17, 10:14 pm |
| Hi all,
Sombody outside my workplace seems to have continuously "sneaked" into my company's W2k server.
Are there any logs on the W2k server which records the activities of terminal services or ftp access?
Apart from SP3, are there other patches recommended?
TIA,
Goku | |
| cm2gj 2002-11-18, 11:30 am |
| quote:
Originally posted by supergoku0
Hi all,
Sombody outside my workplace seems to have continuously "sneaked" into my company's W2k server.
Are there any logs on the W2k server which records the activities of terminal services or ftp access?
Apart from SP3, are there other patches recommended?
TIA,
Goku
mmm. security on 2k!! you must have the last service pack, install the IIS patch, internet explorer patch, acumulative patchs, block anonymous user, kill admin shares like c$, remove ghest accounts, change administrator username, etc.
download languard from the following link:
http://www.gfi.com/languard/
download, install and scan your server to check all your vulnerabilities. this software provide you with the MS links to download ALL patches!!!
you must authenticate all the IIS access. remember to use a good scan antivirus because virus like CODE RED or NIMDA affects this services.
kill anonymous accounts and use only autenticated access. you can enable auditing to register all the connections on the event logs. | |
| Pavlov 2002-11-18, 12:16 pm |
| Or you could read a bit about Auditing...  | |
|
| you can make a search on the web to look for security implementations for your network. a very good method is to use ipsec. | |
| jocampo 2002-11-19, 4:23 pm |
| quote:
Originally posted by Pavlov
Or you could read a bit about Auditing...
Agree! could be a lot of things! | |
| supergoku0 2002-11-20, 2:41 am |
| Thanks for your inputs, Gents.  |
|
|
|
|