One of our win server 2008 virtual machines is constantly at 30% cpu. Looking at the task manager I notice that
LogonUI.exe appears again and again, each time with a different process id (PID). It captures ~10% cpu, but I guess that's not the issue...
Is this an indication someone is trying to hack into our machine by brute forcing his way in?
Why else would Windows initiate so many
How can I validate this?