Windows 2003 Authentication tracking

  • Thread starter Thread starter Jim
  • Start date Start date
J

Jim

Hi,

I have a 2k3 Server (std, sp2) with couple of 3rd part apps to track
application usage (web, ftp, etc.).

Within the application there is a file that has a hard coded username and
password. The user who's username and password is being used within the app,
has his account locked out when he changes his password.

The developer does not recall where he might have placed his credentials
(BAT, CFG, etc.). There are no services running using his account. I
believe that this server sends the authentication request to run the
file/app/process but eventually times out. I have checked the Event Viewer
but I am not sure if this application or process has been set to send error
messages to the Event Viewer.

Question: How can I track/find which file/app/process is requesting
authentication, which ultimately locks his account due to too many logon
attempts?

thx,

Jim
 
Back
Top