[quoted text, click to view]

some like to also create a guest account called Administrator...

[quoted text, click to view]

If FTP allows ANY account credentials to be given, I do not think that it
can be told which account names to not even try to authenticate. If someone
enters the name of the administrator and a wrong password, FTP will need to
authenticate the pair before it knows that this is the account it is not to
allow in.

I'm going to (try to remember to) try this test with an RDP connection at
work tomorrow:

try to logon to a server with an account that does not have access to logon
to the server;
give a bad password;
observe the message that is displayed;
check to see that it registers in AD as a bad password attempt;
try another login with the correct password;
observe the message that is displayed;

I suspect that the bad password will be counted as an error (hey, do you
want to be totally unaware that someone is guessing your password?), and
that giving the correct password will reset this, even though the logon will
fail for a different reason.

I also suspect that the server will give two different messages as to why it
is not allowing the logon, therefore giving the attemptee confirmation of
which is the correct password.

/Al