Win2003 prevention method of preventing violent crack _win server

Recently found on my server Winlogon.exe and Csrss.exe These two processes have been constantly started, closed, suspected to be violently cracked, I tried, as long as you use remote connection to the server will start these two processes, close the remote will end these two processes, indicating that my inference is correct.

So we have to stop this.

Administrative Tools-> Local Security settings-> Local policy-> security options-> Network access: Do not allow anonymous enumeration of SAM accounts and shares

Enable can

In view of the fact that some friends do not operate, special text

start -> run gpedit.msc



Step Two:



The application will be OK after.

To prevent hackers from entering, changing passwords or whatever, you can either install a security dog or McAfee prohibit the creation of new users and modify user passwords.