Jan 06 2021 08:31 AM
I have a windows server 2016 in one of my clients office. It is accessible to many people physically. I noticed that the guest account automatically enables it from time to time even though I disable it every time. Only I have the admin password. Can this be done by hackers. Server is not connected to the internet.
Jan 06 2021 08:46 AM
You can turn on some auditing.
Audit User Account Management (Windows 10) - Windows security | Microsoft Docs