IPC$ accessed from one workstation to another workstation

N

Nathan Bob

Hi,

I see workstations are establishing IPC$ connections to another workstation, although they both don't have any relationship in terms of sharing files or folders. The strange thing is that workstation account name endswith $ which is the name of another workstation in the 5140 event log and it is trying to establish IPC$ to another workstation. Although they don't have any shares enabled on both ends. The same was also observed in several workstations in which one workstation attempting to another and establishing IPC$. Also they are not print servers. They are just normal workstations only. Not even any servers.

May I ask what are the other possible reasons that would cause this kind of situations?

Continue reading...
 
Back
Top Bottom