Solved

Unknown logon attempts

Posted on 2014-11-25
7
166 Views
Last Modified: 2014-11-26
Ever since upgrading to Mac OS Yosemite, I've been experiencing unknown logon attempts to my work server -- the logon attempts are coming from my home computers. The work server is Windows 2008 SBS. The logon is using an incorrect password which is causing a lockout on my user account.

I have deleted the native VPN accounts thinking this might be causing the problem. But it still occurs. I installed the Sonicwall NetExtender Mac client application to connect to my work VPN because the native Mac VPN connection did not work after the upgrade to Yosemite (I understand there's a bug in the OS). However, I was observing the logon attempt behavior prior to installing NetExtender -- so I don't think it's related.

Is there a way to determine what is causing this behavior?
0
Comment
Question by:clcarlson
  • 4
  • 3
7 Comments
 
LVL 53

Expert Comment

by:strung
ID: 40465010
Try Little Snitch. It alerts you to outgoing connection attempts from your Mac:

http://www.obdev.at/products/littlesnitch/index.html

There is a free demo:  http://www.obdev.at/products/littlesnitch/download.html
0
 

Author Comment

by:clcarlson
ID: 40465026
Thanks for the suggestion. I will give it a try tonight and see if identifies the culprit. I will report back :)
0
 
LVL 53

Expert Comment

by:strung
ID: 40465053
Alternatively, you could check your console logs for the time the log in attempt was made. There is likely a log item for the failed attempt.
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 

Author Comment

by:clcarlson
ID: 40465065
Where do I find the console logs? Do I access via terminal? Or is it viewable with a text viewer?

Thanks.
0
 
LVL 53

Accepted Solution

by:
strung earned 500 total points
ID: 40465069
Just open Console.app found in /Applications/Utilities, or use Spotlight to search for Console.
0
 

Author Comment

by:clcarlson
ID: 40465074
Ok, thanks. I will check it out.
0
 

Author Closing Comment

by:clcarlson
ID: 40468128
This was so easy and quick! The offending application (Calendar) popped right out when I opened the Console.app.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Even though Mac OS X has been around for many years now, certain well-liked and eminently useful software apps never made the jump from Mac OS 9 to Mac OS X. Ever used Word Perfect for Mac? Version 3.5 was the last version, built for Mac OS 9. Who c…
In this article we will discuss some EI Capitan Mail app issues and provide some manual process to resolve them.
Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
Edureka is one of the fastest growing and most effective online learning sites.  We are here to help you succeed.

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now