terminal services error

Posted on 2011-10-21
Medium Priority
Last Modified: 2012-05-12
hi, just recently we started getting the following error on win2003 server:
Remote session from client name a exceeded the maximum allowed failed logon attempts. The session was forcibly terminated. EventID 1012. this is on a DNS server on the public side - how can I isolate this problem ?
Question by:nevyana2006
  • 2
LVL 34

Expert Comment

by:Paul MacDonald
ID: 37008690
It sounds like someone outside your network is trying to remote in to your DNS server.  One way to quell this would be to lock down the RDP ports at your firewall.

Author Comment

ID: 37008783
the server is not behind a firewall.. will changing the default 3389 to something else help ?
LVL 34

Accepted Solution

Paul MacDonald earned 2000 total points
ID: 37008821
Not behind *any* firewall?  Not even a software one?

Changing the port number might help, but a real hacker will just port scan until he finds something open.  If you have to have RDP, that's better than nothing.  Otherwise, I'd turn off everything you didn't absolutely need.

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is my 3rd article on SCCM in recent weeks, the 1st (http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/Windows_Server_2008/A_4466-A-beginners-guide-to-installing-SCCM2007-on-Windows-2008-R2-Server.html) dealing with installat…
On a regular basis I get questions about slow RDP performance, RDP connection problems, strange errors and even BSOD, remote computers freezing or restarting after initiation of a remote session. In a lot of this cases the quick solutions made b…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question