[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntsecurity
Subject:    [NTSEC] Security
From:       swoodyar () csulb ! edu
Date:       1998-01-30 13:37:51
[Download RAW message or body]


TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

     While auditing our PDC's security log, I have come accross several
failed access attempts by NTAUTHORITY\ANONYMOUS that look like this:

Object Open:
     Object Server: Security Account Manager
     Object Type:   SAM_DOMAIN
     Object Name:   [ Our domain name ]
     New Handle ID: -
     Operation ID:  {0,136859369}
     Process ID:    2156805632
     Primary User Name:  SYSTEM
     Primary Domain:     NT AUTHORITY
     Primary Logon ID:   (0x0,0x3E7)
     Client User Name:
     Client Domain:
     Client Logon ID:    (0x0,0x2766)
     Accesses       CreateGlobalGroup
          LookupIDs

     Privileges          -

[prev in list] [next in list] [prev in thread] [next in thread]