troubleshooting Question

Windows Server 2003 Possible Hack

Avatar of Manuel
ManuelFlag for United States of America asked on
OS Security
8 Comments1 Solution912 ViewsLast Modified:
Hello,

      This is the situation, I have a machine running Windows Server 2003 which I am using to run software to manage different network devices. This machine is also my Syslog server. This machine and all other machines are behind a PIX firewall. However, I have this machine configured for Remote Desktop Connection, so I have the port for Remote Desktop open on the PIX. Well, yesterday for no apparent reason the machine rebooted itself and stated that the Operating System was missing I rebooted the machine and when I did the system stated that a system change had occur, it stated that I had added a Hard Drive which I did not. So I rebooted the machine and Windows Server 2003 started up again. My question is how I can find out if some got into the machine without my authorization. Also, how safe is leaving Remote Desktop port open to the internet, how easy is it to enter the correct password at the Windows login screen?  

                                                                                Thank You very much.
ASKER CERTIFIED SOLUTION
Phil_Agcaoili

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 8 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 8 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros