I've got a 2000 Domain controller with a lot of 5501 events happening. The bad packets are coming from a particular IP, based in Austria.
I realise that the event is just informational, but I'm concerend that this one IP is maliciously sending malformed packets, and it's slowing down my DSN server.
Can anyone give me a good way to deal with it?
Do you have a ACL/IPSec setup? If so i would make sure that this IP is filtered to ignore all request.
If you would lik emore info on doing this i suggest this article
Have you considered what group policies are backwards and forwards compatible?
Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications. The user can either have a desktop shortcut installed or go through the web portal to…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …