Thread: Windows 2K Restarting...
February 13th, 2003, 05:29 PM #1
Windows 2K Restarting...
Here is the deal, we have some jokester in the office who has figured out a way to remotely re-start Windows 2000 machines. Does anyone know what software or "scripts" can do this? I really need to figure it out. Is there a port I can block on the internal network. Any help would really be appreciated. Thanks!
February 13th, 2003, 05:44 PM #2
Make sure the "jokester" hasn't made a 'Scheduled Task' that restarts it.
February 13th, 2003, 05:49 PM #3
There seem to be many apps that do this, like from the command line, you use the Shutdown.exe utility, which is located in the Windows 2000 Resource Kit. Or the Computer Management method (Right-click the Computer Management (Local) node and select Connect To Another Computer. On the dialog that appears, specify the remote computer and click OK. After the console connects to the remote computer, right-click the Computer Management (computername) and select Properties.
Go to the Advanced tab and click the Startup And Recovery button. On the dialog that appears, click Shut Down.
Another dialog will appear that will provide you with several options like logoff, restart, and shutdown. Select the choice you want and click OK.)
I though you have to be a power user or administrator level user to remotely restart the computer. I never really checked though.
February 13th, 2003, 05:55 PM #4
Rick .. I did check that .. unfortunetly, this seems to be a remote issue. I wonder if there is anyway I can scan for this, I think I know who is doing this, but not entirely sure.
February 13th, 2003, 05:56 PM #5
Isn't there a "net..." command that can be used?
February 13th, 2003, 05:58 PM #6
their is a prog that hides itself called appstracka that i have had to rid of before. some of the same issues. try www.webattack.com they have plenty of progs that might help ya rid of your prankster.
-L2LASUS 7900GT 256MB
Hauppauge pvr 150 MCE
Pentium D 930
ASUS P5WD2 P
4gb CORSAIR DDR2
2 WD Raptors 74GB (RAID 0)
Antec Lanboy case
Windows XP MCE
February 13th, 2003, 06:03 PM #7
Evilrick ... yea thats what I was thinking .. we had a rash of those "net send" a while ago. I was thinking there might be a net shutdown command or something.
Thanks L2L I will check it out.
February 13th, 2003, 08:44 PM #8
well like DVNT1 said I would think you'd have to have some kind of administrative privelege to be able to remotely restart or shutdown a computer. if all else fails, check your local security policy to see if there is something in there that addresses it.
February 13th, 2003, 08:48 PM #9
on a second thought I just found this, from here: http://www.der-keiler.de/Mailing-Lis...2-09/0058.html
if u do not want a specific computer to be able to go for a remote shutdown then i think that this shud work:goto: usermanager-->policies-->user rights-->force shutdown from remote system (DISABLE THIS)
February 16th, 2003, 07:08 PM #10
any news on if this works or not? or do you hava wait till monday?
June 12th, 2007, 04:28 PM #11
- Join Date
- Nov 2006
do you know who it is
Users Browsing this Thread
There are currently 2 users browsing this thread. (0 members and 2 guests)