Keith Roberts wrote: > On Fri, 23 Sep 2011, m.roth at 5-cent.us wrote: >> From: m.roth at 5-cent.us >> Keith Roberts wrote: >>> On Fri, 23 Sep 2011, Paras pradhan wrote: >>> *snip* >>> >>>> No. This is a production server and nobody logs in. Very >>>> very restricted. >>> >>> Have you checked all your logs? What ports are open? >>> What CLI tools to format a HDD do you have on the server? >> <snip> >> And then there's the other question: who has *access*, physically, to >> the server? Staff? Have any staff recently been let go? Cleaning people? > > Sounds like somebody may have stuck a Linux installation DVD > into the drive, and hit Ctrl-Alt-Del ? > > Could something like this happen by accident - ie woops I > hit the wrong machine? And there's no way they're going to admit it, esp. if they're worried about their job. Now, if the room is locked, and there's either video, or key card records.... mark