Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Tracking down a DNS change from a shared user account

$
0
0

Windows 2008 R2, this is NOT a dns server, but someone changed the DNS server's static assignment in the TCPIP properties of the LAN connection.

I know what account did it, but it's a shared admin account that several have access to.  Without getting into the whole bad practice of a shared account diatribe, does anyone know a way with default logging on a server that i might be able to find more info on this change?  Perhaps a source ip address?

Just thought I'd throw it out there for all the gurus.

Thank you.


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>