Windows Forum

Ask something
Discussion Locked

Unauthorized network access

0 helpful
6 replies

by sameh mahmoud

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
How do you know that someone has accessed your network (Windows 2000 platform) without authorization?

6 replies

by mike o

The nutshell answer is to make sure you're logging activity on the server if you're running IIS for FTP and web for starters. Check out the Help files for more details.

Another way is to use some kind of Intrusion Detection System. I haven't usedthem much myself, but you can find plenty of information at sites like Security Focus (http://www.securityfocus.com) and Help Net Security (http://www.net-security.com).

Good luck!

Take care,
Mike

by zlitocook

Another thing to look at would be, are there files missing, changed or settings changed. Heh if they took control of the server your access would be denied. Look to M.S. for ideas on blocking ports and for pete's sake use vary hard passwords and dont enable the guest account! its disabled by default.

by zlitocook

Use all patches that come out and use the built in logging and alerts that come with the cd. Most are not put into use untill you enable them. Read the readme and others on the cd.

This discussion is closed to new replies.