Looks like. It's got the right uid's but wrong passwords. After five failed attempts, the account is locked out.
One of the machine names was familiar to us--a commercial customer on our wireless network. We asked them to check that machine. I suspected it was infected with a trojan. They just called back. That looks like a good possibility for that machine. However, there have been 3 different machine names we've found--on different networks. ~Katie -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 13, 2003 5:50 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] OT; user accounts getting locked out en masse; process is ksecdd Password cracking program running? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > [EMAIL PROTECTED] On Behalf Of Katie La Salle-Lowery > Sent: Friday, June 13, 2003 4:33 PM > To: [EMAIL PROTECTED] > Subject: [IMail Forum] OT; user accounts getting locked out en masse; process is > ksecdd > > Hi All, > > Just cuz you're such an broadly experienced group I'm going to pose my > problem of the day: > > My User Accounts (Windows network) are getting locked out en masse. > Event viewer shows failed login attempts using process ksecdd. > > I'm Googling my little heart out but if anyone in this knowledgable > group has any insight, I'd be in their debt. > > Thanks, > Katie > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: > http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
