Search found 51 matches

by fakebrains
Tue May 14, 2019 3:14 pm
Forum: Troubleshooting and Problems
Topic: Windows Logon audit is not enabled RDS knight
Replies: 2
Views: 4406

Re: Windows Logon audit is not enabled RDS knight

Thanks.
I disabled the group policy that was affecting it.
by fakebrains
Fri May 03, 2019 2:34 pm
Forum: Troubleshooting and Problems
Topic: Windows Logon audit is not enabled RDS knight
Replies: 2
Views: 4406

Windows Logon audit is not enabled RDS knight

RDS knight Bruteforce tab. Server 2012 / Server 2016 Windows Logon audit is not enabled - Logon Failures are not monitored. Click here to repair the feature. I have to keep on clicking it to repair it. I would like to set this through group policy. I am enabling the setting here and running gpupdate...
by fakebrains
Wed Apr 17, 2019 7:59 pm
Forum: Suggestions and Feedback
Topic: RDS Knight
Replies: 1
Views: 8804

RDS Knight

After looking at security logs, there are several computes / bot net in the us attacking us on a constant basis. It would be cool if in the security event log for RDS Knight when you right click on a log item. you should be able to black list that IP. All I see is white list.
by fakebrains
Thu Apr 04, 2019 2:17 pm
Forum: Troubleshooting and Problems
Topic: RDS Knight Brute Force Attacks on Port 127.0.0.1
Replies: 9
Views: 11387

Re: RDS Knight Brute Force Attacks on Port 127.0.0.1

Recent update to version 4.1.4.3 seems to have resolved the issue with 127.0.0.1 . I have not seen any since updating the software to the current version. YAY
by fakebrains
Wed Mar 27, 2019 8:54 pm
Forum: Troubleshooting and Problems
Topic: RDS Knight Brute Force Attacks on Port 127.0.0.1
Replies: 9
Views: 11387

Re: RDS Knight Brute Force Attacks on Port 127.0.0.1

Update fixed it for a few but still seeing a lot of entries on 127.0.0.1
Looks like they are trying to use port 80 /443 to rdp. The RDS Knight tool should be able to determine the IP instead of just 127.0.0.1
not sure, does not appear the update fixed it.
by fakebrains
Wed Mar 27, 2019 7:35 pm
Forum: Troubleshooting and Problems
Topic: RDS Knight Brute Force Attacks on Port 127.0.0.1
Replies: 9
Views: 11387

Re: RDS Knight Brute Force Attacks on Port 127.0.0.1

Our TSPlus servers started getting the brute force attacks on 3/10/2019. Port 127.0.0.1 Modifying the settings.bin and adding disable_rdp=true to stop remote app will not work for us as we have a lot of users that currently use the remote app and that may drive some of them to pitchforks and torche...
by fakebrains
Wed Mar 27, 2019 3:02 pm
Forum: Troubleshooting and Problems
Topic: RDS Knight Brute Force Attacks on Port 127.0.0.1
Replies: 9
Views: 11387

Re: RDS Knight Brute Force Attacks on Port 127.0.0.1

Our TSPlus servers started getting the brute force attacks on 3/10/2019. Port 127.0.0.2 Modifying the settings.bin and adding disable_rdp=true to stop remote app will not work for us as we have a lot of users that currently use the remote app and that may drive some of them to pitchforks and torches...
by fakebrains
Fri Mar 22, 2019 2:55 pm
Forum: Troubleshooting and Problems
Topic: Universal printer
Replies: 6
Views: 7841

Re: Universal printer

Modifying the bin file worked.
but after a reboot of the server the printers.bin file is back to normal.
by fakebrains
Thu Mar 21, 2019 7:54 pm
Forum: Troubleshooting and Problems
Topic: Universal printer
Replies: 6
Views: 7841

Re: Universal printer

I think this is only happening when connecting via HTML5.
Universal printer is set to default normally but when connecting to HTML5, it sets the default printer as Universal printer (redirect). I prefer the PDF generation rather than trying to print to the redirect printer.
by fakebrains
Wed Mar 20, 2019 10:37 pm
Forum: Troubleshooting and Problems
Topic: Universal printer
Replies: 6
Views: 7841

Universal printer

Does anyone know if you can make the universal printer the default. It seems that it always defaults on the universal printer redirect instead of the universal printer. I like the pdf generation and want to make that the default. is there anyway to do this on a server level that will affect all user...