Highlighted
jgillfeather2
1 Copper

Unusual authentication activity with full_dsc_6875_668_64_02.exe

Howdy,

was wondering if anyone is aware of why the most recent Support Assist for PC's (6875_668_64_02) might be trying to authenticate with all local domain controllers?

We've had the previous version installed on clients for sometime, the only two units with the new version keep unsuccessfully trying to logon to AD, and weirdly poll each DC in turn.  My SEIM keeps identifying the activity as potential Brute-force attack

Any clues?

0 Kudos
2 Replies

RE: Unusual authentication activity with full_dsc_6875_668_64_02.exe

Hi Howdy,

Thanks for posting the question here. I will get in touch with the product team and let you know an update.

Thanks

Kusuma.

0 Kudos

RE: Unusual authentication activity with full_dsc_6875_668_64_02.exe

HI Howdy,

Could you please let me know the link from where you downloaded the exe to install SupportAssist. And the SupportAssist you have installed is for single user or to manage multiple systems ?

This is the link for the latest release of SupportAssist

www.dell.com/.../support-center

Thanks

Kusuma.

0 Kudos