Security

Ask something
Discussion Locked

User account with admin rights

0 helpful
5 replies

by mevans8182

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hello:

I have a user account with admin rights assigned to it. In the wee hours of the night, someone tried to logon with this account and locked it. When I went to unlock the account, I looked at the "Last Intruder Address" -- which listed nothing. Usually it lists a segment number and a MAC address but this time nothing. I went back in the log about a week and it listed this: 81782022:000000000001
How can I find out who this is? Is there additional logging I can turn on the track down the individual? Thank you!

5 replies

by isys

The MAC address of your intruder should be:

00 00 81 78 20 22

The 000000000001 is your IPX network number.

by mevans8182

I assume this is the MAC address. 00000000000001 is actually not the IPX network number....The question is how do I find out who this is?

by isys

For a Netware environment, open a DOS box on your workstation and type the command:

nlist user /a

(space between words and before /)

This will give you a list of user names and MAC addresses of active connections.

This discussion is closed to new replies.