Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Duplicate name changes on multiple devices without user interaction.


  • Please log in to reply
4 replies to this topic

#1 MattSmall

MattSmall

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:46 AM

Posted 27 May 2016 - 10:36 AM

I've been dealing with an issue over the last few days in which some of our devices have been spontaneously renamed when the user locks the computer.

The odd part is, they all seem to be renaming to the same thing.  They're all renaming to one device that is tied to our network, but it is not having any issues at all.

What makes it even stranger is that it has gone through six of our user devices and the devices still populate in AD as their original name.

Anyone have any idea as to what could be causing this?

We're a Win 7 64 bit shop.



BC AdBot (Login to Remove)

 


#2 Kilroy

Kilroy

  • BC Advisor
  • 3,461 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Launderdale, MN
  • Local time:09:46 AM

Posted 29 May 2016 - 06:54 AM

What makes you think that the computers are being renamed?

 

When you unlock the computers and go into System Properties do they have the original or changed name?



#3 MattSmall

MattSmall
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:46 AM

Posted 31 May 2016 - 07:40 AM

The computer name is changed.  The unlock screen and the system properties screen both display the new name which should not be possible without a reboot.  It's always changed to the same thing as well across multiple devices.  They all seem to be assuming the identity of the same device on our network.  The device that the name originates from has not been on the network in two weeks, and after multiple scans no malware was detected.



#4 Wand3r3r

Wand3r3r

  • Members
  • 2,027 posts
  • OFFLINE
  •  
  • Local time:08:46 AM

Posted 31 May 2016 - 12:20 PM

"They're all renaming to one device that is tied to our network"

 

Personally I would have taken this device off the network immediately. Isolate it and scan for hackerware. Consider reimaging.  I would have had it join a workgroup, delete the AD computer reference and DNS references and then brought it back into AD


Edited by Wand3r3r, 31 May 2016 - 12:22 PM.


#5 MattSmall

MattSmall
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:11:46 AM

Posted 31 May 2016 - 03:49 PM

Scanned it, but nothing.  I'll have to try removing, renaming, and re-adding the device to see if that fixes it.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users