Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
    Bumped by Community user
3 deleted 21 characters in body
source | link

I woke up to a creepy Windows event where the Server B used the Computer account$ of Server A attempted to log on to Server B while the attacker is Server B itself(itself).

The logon type is 2 and the destination process is of course "lsass.exe"

Why would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

The failure reason is "The user has not been granted the requested logon type at this machine."

I woke up to a creepy Windows event where the Computer account$ of Server A attempted to log on to Server B while the attacker is Server B itself.

The logon type is 2 and the destination process is of course "lsass.exe"

Why would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

The failure reason is "The user has not been granted the requested logon type at this machine."

I woke up to a creepy Windows event where the Server B used the Computer account$ of Server A to log on to Server B (itself).

The logon type is 2 and the destination process is of course "lsass.exe"

Why would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

The failure reason is "The user has not been granted the requested logon type at this machine."

2 deleted 116 characters in body; edited tags
source | link

For all the windows security advocates and Blue Teamres out there I need help!

I woke up to a creepy windowsWindows event where the Computer account$ of Server A attempted to logonlog on to Server B while the attacker is serverServer B itself !!!.

The logon type is 2 and the destination process is of course "lsass.exe"

My question here is whyWhy would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

By the way theThe failure reason is " The"The user has not been granted the requested logon type at this machine."

For all the windows security advocates and Blue Teamres out there I need help!

I woke up to a creepy windows event where the Computer account$ of Server A attempted to logon to Server B while the attacker is server B itself !!!

The logon type is 2 and the destination process is of course "lsass.exe"

My question here is why would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

By the way the failure reason is " The user has not been granted the requested logon type at this machine."

I woke up to a creepy Windows event where the Computer account$ of Server A attempted to log on to Server B while the attacker is Server B itself.

The logon type is 2 and the destination process is of course "lsass.exe"

Why would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

The failure reason is "The user has not been granted the requested logon type at this machine."

1
source | link

Windows Failed Logon Type 2 by A Remote Computer Account!

For all the windows security advocates and Blue Teamres out there I need help!

I woke up to a creepy windows event where the Computer account$ of Server A attempted to logon to Server B while the attacker is server B itself !!!

The logon type is 2 and the destination process is of course "lsass.exe"

My question here is why would a computer account request an interactive logon attempt type 2 instead of over the network type 3?

By the way the failure reason is " The user has not been granted the requested logon type at this machine."