I have just logged onto one of our servers and the desktop has changed, on
loggin you are presented with the "manage your server" window, this never
used to appear.

We have a lot of users using this server and they are all standard users so
shouldnt be able to change system settings.

Also when you go into admin tools, there are no tools there?

Anyone have any ideas? Could I track the changes through event viewer? what
type of events should I filter for?

Hi,

Look for any irregular activity. Many things could have happened so finding
reasons is point less. check if you are still secure.

Let me know if you need more help.

Regards,
Rahul Nathan

MCSE 2000 / MCSA 2003



"toal5" wrote:

toal5 wrote:
Are u sure that you did not logon by using a different admin user?
In event viewer, security, you can see who have access to your server and at
what time.
--
---
Giuseppe Nacci
Microsoft Certified System Engineer
Security Manager

--------------------------------------------------------------------
CONFIDENTIALITY NOTICE
This message and its attachments are addressed solely to the persons
above and may contain confidential information. If you have received
the message in error, be informed that any use of the content hereof
is prohibited. Please return it immediately to the sender and delete
the message. Should you have any questions, please contact us by
replying to supporto.informatico@degennaro.biz
Thank you
--------------------------------------------------------------------