Re: Anonymous logon

From: Jim (jimbone_at_hotmail.com)
Date: 11/10/03


Date: Mon, 10 Nov 2003 08:48:41 -0500

Open your Local Policy Editor and check for your local audit policies.

Jim

Damjan The commander of all things worth commanding said on 11/10/2003
7:56 AM:

> Hi!
>
> I have found many security event like this one..
>
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 540
> Date: 9.11.2003
> Time: 10:59:19
> User: NT AUTHORITY\ANONYMOUS LOGON
> Computer: BLUEBOX
>
>
> OS is WinXP SP1.
> I'm wondering, who or what cause this audit? I haven't any users or remote
> logon support, and guest accaunt is disablet too!
>
>
> Tnx 4 help!
>
>
> Greets
> D
>
>



Relevant Pages

  • Re: Anonymous logon
    ... Open your Local Policy Editor and check for your local audit policies. ... > I have found many security event like this one.. ... > logon support, and guest accaunt is disablet too! ...
    (alt.computer.security)
  • Security Policy / Auditing / Event Logs - Please Help!
    ... The Security event log on this machine has hundreds of 'Success Audit' ...
    (microsoft.public.windows.server.general)