Change the policy and increase the days by one. Resync entire domain and check each BDC worked. Reset policy back to normail, resync domain. worked for us
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Wednesday, 17 July 2002 10:54 a.m. To: NT 2000 Discussions Subject: RE: Klez This has stumpped me... Every account in the domain controller was just locked out. Usually I get a couple a month. Even those that have the day off or have left early had their account locked out. Event log shows a couple of unsuccessful logons from users and computer in here and tons of successful logons. The successful logons where from legitimate machines and users here. This happened to every ones account at the same time. Any ideas? Jacob At 02:42 PM 7/16/2002 -0400, you wrote: >never hurts to fdisk that mbr > >Thank you, > >Robert Saylors >Technical Services Manager >FoxBerry Incorporated > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED]]On Behalf Of Woods, Tony >MHR:EX >Sent: Tuesday, July 16, 2002 1:55 PM >To: NT 2000 Discussions >Subject: RE: Klez > > >Oh ya, I know what it does, it's just a little habit of mine to do this when >a virus hits a machine... Especially my parents [;-) > >Cheers, >Tony > >-----Original Message----- >From: Wes Owen [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, July 16, 2002 10:50 AM >To: NT 2000 Discussions >Subject: RE: Klez > > >This virus spoofs the sender it is most likely not actually coming from him. > >-----Original Message----- >From: Woods, Tony MHR:EX [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, July 16, 2002 12:18 PM >To: NT 2000 Discussions >Subject: RE: Klez > > >Sometimes for fun... Fdisk /mbr > >Cheers, >Tony > >-----Original Message----- >From: W2K Discussions [mailto:[EMAIL PROTECTED]] >Sent: Tuesday, July 16, 2002 10:17 AM >To: NT 2000 Discussions >Subject: Klez > > >Hi there... I had a user infected with the KLEZ worm.... And I have since >rebuilt his machine.... (format, and reload), yet scan mail has picked up an >instance of his machine apparently sending an email with this.... Is there >something else I should have done to repair the machine? It is running AV >with all the latest patches.... > >Ideas? > > Dustin > > > >------ >You are subscribed as [EMAIL PROTECTED] >Archives: http://www.swynk.com/sitesearch/search.asp >To unsubscribe send a blank email to %%email.unsub%% > >------ >You are subscribed as [EMAIL PROTECTED] >Archives: http://www.swynk.com/sitesearch/search.asp >To unsubscribe send a blank email to %%email.unsub%% > > >This e-mail and any files transmitted with it are confidential and are >intended solely for the use of the individual or entity to whom they are >addressed. If you are NOT the intended recipient or the person responsible >for delivering the e-mail to the intended recipient, be advised that you >have received this e-mail in error and that any use, dissemination, >forwarding, printing, or copying of this e-mail is strictly prohibited. > > >------ >You are subscribed as [EMAIL PROTECTED] >Archives: http://www.swynk.com/sitesearch/search.asp >To unsubscribe send a blank email to %%email.unsub%% > >------ >You are subscribed as [EMAIL PROTECTED] >Archives: http://www.swynk.com/sitesearch/search.asp >To unsubscribe send a blank email to %%email.unsub%% > > >------ >You are subscribed as [EMAIL PROTECTED] >Archives: http://www.swynk.com/sitesearch/search.asp >To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ********************************************************************** This email is not an official statement of the Waikato Regional Council unless otherwise stated. Visit our website http://www.ew.govt.nz ********************************************************************** ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
