I recently purchased a server base and everything was going great for 2 days, but people were able to get in even though on the main site page I set a password. I went into the serverconfig.xml file and added the same PW there. I made sure that EAC was still set to "false" and that all the same options were the same. Upon restarting the server, the server name shows up in Server Browser but "Vanilla Settings" say On now and Game time reads Day: 1 Time: 07:00. Along with this, no matter what I do, EAC will not disable.