Strange phaenomen on w2k server

[mastermind455]

Hi all

on our productive webservers (based on w2k and IIS5.0) we encouter much troubles since a few days

suddenly the server disallow the login via Terminal Server and the following error appears:

"The System can not logon you due to the following error:

The network request is not supported"

Please try again or consult your system admin ...."


After a reboot everything works fine, but after a while this strange error appears again and so on ....

First we heard about a new virus variant and therefore we checked all machines but they where all clean

also we reinstalled the whole network stuff (NIC Driver, TCI/IP Stack etc) and TSE but this doesn't solve the problem

does anybody know about this strange phaenomen and how this can quickly resolved cause the machines have to run properly

 

[aftertaf]

Do you have licensing problems in your event logs?


Aftertaf
Last time I checked, i wasn't Mike Lacey

 

[mastermind455]

No, because the TSE's are all runni in Remote Mode and therefore i need no licenses

 

[mastermind455]

well it was a keylogger, better say a hacker which gained access to our machines and it seems that he liked to play with me (i hate this guys, if i ever catch one, then Grace it God)
now we secured immediatly our sever to avoid this in the future

 

[mastermind455]

New Info

wasn't a hacker, cause all servers expect one where affected

see also

http://www.experts-exchange.com/Operating_Systems/Win2000/Q_21443828.html

Use of patches described in the article below seems the solution, i will watch for it and hope the error is gone



Applying patches MS04-007/KB828028 and MS04-011/KB835732