Networks

Ask something
Discussion Locked

How to avoid system haching

0 helpful
1 reply

by suresh_ig

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi all,
I have a local admin account as well as domain user login in my webserver. Always I login as domain admin account where IIS is configured.I found that somebody is connecting to my server via RDP And are using my system resources(I observed in task manager-users). I wanted to know is there any way to find from which location or IP user is connecting to our system

1 reply

by robo_dev

First of all, you can increase the logging level in your firewall.

Do you have a hardware firewall? It might be a good idea to block RDP.

Next, I would setup a separate machine with an ethernet hub and run WireShark protocol analyzer to see all inbound/outbound traffic.

What OS is your webserver? If it's Win2003, you would want to change security settings to enable auditing (security settings, local policy, audit policy, audit logon events).

less useful is to do a netstat -an at the command prompt.

This discussion is closed to new replies.