Tags: business, installed, log, microsoft, msdn, mydaily, orbad, password, sbs, section, server, software, unknown, user

Unknown user name or bad password

On Microsoft » Microsoft Small Business Server (SBS)

2,111 words with 1 Comments; publish: Tue, 27 May 2008 01:30:00 GMT; (300140.63, « »)

Hi, I installed SBS 2003 about 3 weeks ago, and in my

daily log, I always get one or two "Unknown user name or

bad password" under the section "critical errors in

security log" The thing is, I don't even know these

names,domains or IP's. I have an external firewall, with

only the ports open, that need to be opened. My question

is, how are these people getting to access my SBS server?

Here is the error.

Logon Failure:

Reason: Unknown user name or bad password

User Name: Admin

Domain: COMPUTER1

Logon Type: 3

Logon Process: NtLmSsp

Authentication Package: NTLM

Workstation Name: COMPUTER1

Caller User Name: -

Caller Domain: -

Caller Logon ID: -

Caller Process ID: -

Transited Services: -

Source Network Address: 66.14.170.240

Source Port: 0

Thanks

Chad

All Comments

Leave a comment...

  • 1 Comments
    • Hi Chad

      These are failures which is good ;-) Keep strong passwords in effect.

      Frank McCallister

      COMPUMAC

      "Chad" <anonymous.mssbs.todaysummary.com.discussions.microsoft.com> wrote in message

      news:1fc401c46fec$d3a11210$a601280a.mssbs.todaysummary.com.phx.gbl...

      > Hi, I installed SBS 2003 about 3 weeks ago, and in my

      > daily log, I always get one or two "Unknown user name or

      > bad password" under the section "critical errors in

      > security log" The thing is, I don't even know these

      > names,domains or IP's. I have an external firewall, with

      > only the ports open, that need to be opened. My question

      > is, how are these people getting to access my SBS server?

      > Here is the error.

      > Logon Failure:

      > Reason: Unknown user name or bad password

      > User Name: Admin

      > Domain: COMPUTER1

      > Logon Type: 3

      > Logon Process: NtLmSsp

      > Authentication Package: NTLM

      > Workstation Name: COMPUTER1

      > Caller User Name: -

      > Caller Domain: -

      > Caller Logon ID: -

      > Caller Process ID: -

      > Transited Services: -

      > Source Network Address: 66.14.170.240

      > Source Port: 0

      >

      > Thanks

      > Chad

      >

      #1; Tue, 27 May 2008 01:31:00 GMT