Domain administrator with several authentication attempts on DC

R

Rodrigo Catarino

Hi,We have the "administrator" domain account disabled as the best practice says.I have 200k+ daily failed login attempts from that user from my domain controller to the same machine.The logon service attempt is from krbtgt/MYDOMAIN but as the account is disabled the authentication fails.How can i validate/correct this?Kind regards,Rodrigo Catarino

Continue reading...
 
You must log in or register to reply here.

Similar threads

J
Active Directory - Protected Users cannot logon anymore with SamAccountName after forest and domain functional level update
Replies
0
Views
36
Jean-Mi Jac
J
D
Problems with authentication on domain using smart card logon
Replies
0
Views
271
Dragan Mišukić
D
S
Some Group Policies not running on Windows 10
Replies
0
Views
285
ShaymanTOW
S
S
OpenSSH Server on Windows 10, using key instead of password with an Administrator account.
Replies
0
Views
237
Sotai8
S
D
Huge number of Kerberos pre-authentication failed(4771) Event generates in DC but no account lockout is happening
Replies
0
Views
300
debbasu
D
Back
Top Bottom