I have been monitoring the event log on one of our servers (2003 R2) and there is something wierd going on. There is an account that gets enabled, and almost immediately it is disabled (within a second to a minute). The account is HelpAssistant_xxxxxx, where xxxxxx varies every time. It is happening about every hour or two. We almost never use help assistant here.
What could this be?
Software/Hardware used:
Server 2003 R2
ASKED:
April 26, 2010 2:33 PM
UPDATED:
April 26, 2010 6:14 PM
That’s what occurs when a remote assistance invitation file is created (account is enabled) and the ticket expires (account is disabled).
Have you checked if there is any other task (scheduled task, script, or something else) running at the time when these events are reported, that could be causing the invitation file to be created ?
(I don’t know if those invitation files can be created outside of the Help and Support center, however).