utkmsorptntbvikfhisqdtxmlolggchwiimylhb

Anonymous Bob
no.how@no.way
Site Down:
http://www.superantispyware.com/downloadfile.html?productid=SUPERANTISPYWAREFREE
Also Tried: http://www.superantispyware.com/

I got the system under control, got one problem remaining - HELKERN WORM
keeps attacking my machine.
Intrusion.Win.MSSQL.worm.Helkern identified by Firewall Defender Pro 5-In-1
It don't remove the problem or change settings so it won't happen it is just
keeping a record log of it for now each time it occurs. I am running it on
High
Security (Stealth Mode).

Here is the log...
[each date/time states Attack - Helkern. The attack has been successfully
repulsed]

9/28/2007 11:51:04 PM - attacked from 202.103.11.41
9/29/2007 2:11:23 AM - attacked from 222.217.240.228
9/29/2007 3:00:10 AM - attacked from 220.168.198.58
9/29/2007 2:29:45 PM - attacked from 220...

What can I say....
The Users must be members of Remote Desktop Users on BOTH Servers.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Steve Happ" discussions.microsoft.com> wrote in message
news:93B2A62D-8D13-4C91-B8A2-57F672FBA25F@microsoft.com...

The same user that logs onto TS1 without issue, simply by being a member of
the Remote Desktop Users group on the DC cannot log onto TS2.

"Jorge Silva" wrote:

in that case you may have users that are members of some group that denies
logon through terminal services.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Steve Happ" discussions.microsoft.com> wrote in message
news:FDDD1620-8C68-4FBF-8065-AC8B4B44BB65@microsoft.com...

Both TS1 and TS2 have Administrators and Remote Desktop Users here

"Jorge Silva" wrote:

Unless something has been change, Members of Local Administrators and Remote
Desktop Users can logon through TS on the member servers, you can check this
on the Local GPO each of these Member servers,
type from cmd: gpedit.msc
and navigate to:
computer configuration->windows settings->security settings->Local
policies->User rights Assign->Allow logon through TS

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services
"Steve Happ" discussions.microsoft.com> wrote in message
news:270550A2-B0AA-4AE5-B0DB-4C0932C78DE3@microsoft.com...

Thanks for the reply. Please excuse my ignorance, but how do I determine if
the 2 TS Servers are in the same OU?

"Binu Kumar" wrote:

Correct. My SBS machine is the DC and the W2003R2 servers are Terminal
Servers.

That's what Microsoft tells me, yet my TS1 doesn't require that for users to
log on. It requires that my user is in the Remote Desktop Users group on the
DC.
My TS2, however requires what you're saying.

Why, then, if the TS does require the users to be in the local group, does
TS1 allow users to log on via RDP?

Steve

"Jorge Silva" wrote:

I have an SBS server as my Domain Controller using Active Directory.
I have 2 W2003R2 servers running as Terminal Servers.
I have a group of local domain users on my LAN that access my Terminal
Servers via RDP. They are added to the DC's Remote Desktop Users security
group.

When a user logs onto my first Terminal Server (TS1) via RDP, they are
granted access with no adjustments to TS1. If I've forgotten to add the user
to the DC's Remote Desktop Users security group, they cannot gain access, but
can as soon as I do.

When the same user tries to log onto TS2, they receive the error message:
"To log onto this remote computer, you must be granted the Allow log on
through Terminal Services right ...." and suggests the Remote Desktop Users
group. If I add that user to the Remote Desktop Users group on TS2, they can
gain access.

Why would TS1 get the security from the DC but TS2 does not? Can someone
point me in a direction ?

Thanks

Steve