troubleshooting Question

Finding Ldap Connection

Avatar of swenger7
swenger7 asked on
Windows Server 2008
6 Comments1 Solution257 ViewsLast Modified:
I recently changed my domain admin password. I went in to the services of each of my servers and sorted by log on and wherever it had my domain admin, I changed the password. However, it seems that there is still something using the old password because there are events every minute that the admin password is bad. I was able to see with the events the IP it was coming from was the Exchange Server. I ran Wireshark and was able to see the trace where it shows me the old password being used with LDAP protocol. The problem is that there is no more information and I can't seem to find any service or program running on the Exchange server out of the ordinary using Ldap.

Would anyone have any ideas how I can trace this. Your help would be greatly appreciated.

Sam
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 6 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 6 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros