RE: [NTISP] Event Viewer

Jon Nowell ( JNOWELL@dialnet.co.uk )
Wed, 2 Dec 1998 16:58:06 -0000

This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------ =_NextPart_000_01BE1E14.F4F7EAE0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

I reckon that.....

You've got an application using DCOM which is trying to run (maybe as
a service) and it is running under the Admin account but has been
given the wrong password.

You've either got a local application with a problem or an app being
run remotely, if you don't know which then disconnect it from the Net
and see if it goes away.

I would check service manager for failed services. If really concerned
enable security auditing and see what happens.

Good Luck !

Jon

----------
From: John Lange[SMTP:radadmin@palacenet.net]
Sent: Wednesday, December 02, 1998 4:48 PM
To: ntisp@iea-software.com
Subject: RE: [NTISP] Event Viewer

HI

It sounds like NETHOPPER1 is an NT domain that is trying to attach to
your
domain. If this is YOUR domain then someone is trying to log in with
Administrator to your system.

JOhn :}

At 01:45 PM 12/2/1998 -0000, you wrote:
>Firstly what does NETHOPPER1 do? What is it running?
>
>M@t :o)
>
>-----Original Message-----
>From: NAJI Y CHAKHTOURA [mailto:naj@inco.com.lb]
>Sent: 02 December 1998 13:17
>To: ntisp@iea-software.com
>Subject: [NTISP] Event Viewer
>
>
>Hi Everyone,
>
>My NT System Log File is being loaded by an error message:
>
>=====Begin ERROR MSG.=====
>DCOM got error "Logon failure: unknown username or bad password."
>and was unable to logon NETHOPPER1\Administrator in order to run the
>server: {CBD759F3-76AA-11CF-BE-3A-00AA00A2FA25}
>=====End ERROR MSG.=====
>
>This message has Event ID: 10004 and it never stops...
>
>Thanks a lot in advance for you help
>
>Best Regards
>
>-------------------------------------
>NAJI Y CHAKHTOURA
>Web Administrator
>IncoNet sal http://www.inco.com.lb
>Phone: 961-1-582 000 ext: 386
>Fax : 961-1-563 286
>-------------------------------------
>
>==========================
>NAJI Y CHAKHTOURA
>WEB ADMINISTRATOR
>Network Operation Center
>Inconet sal http://www.inco.com.lb
>Tel-Work : 961-1-582000 ext. 386
>Fax-Work: 961-1-563286
>Mobile : 961-3-884825
>==========================
>
>For more information about this list, including removal,
>see this url: http://www.iea-software.com/maillist.html
>
>For more information about this list, including removal,
>see this url: http://www.iea-software.com/maillist.html
>
>

John C. Lange, Sr. PALACE dot NET, INC.
microjl@palacenet.net MICRO-TECH Computers, Inc.
608.742.1601 & 6980 1918 New Pinery Road
http://www.palacenet.net/ Portage, WI 53901
Visit our online store @ http://www.microt.com/
Authorized iPSwitch WebVar @
http://www.microt.com/iPSwitch/index.html

--- __o
--- _-\<,_ Fastest Service in Town
--- (_)/ (_)

For more information about this list, including removal,
see this url: http://www.iea-software.com/maillist.html

------ =_NextPart_000_01BE1E14.F4F7EAE0
Content-Type: application/ms-tnef
Content-Transfer-Encoding: base64
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------ =_NextPart_000_01BE1E14.F4F7EAE0--