Re: Anonymous logon

From: Dave Korn (no.spam_at_my.mailbox.invalid)
Date: 11/11/03


Date: Tue, 11 Nov 2003 14:47:32 -0000


"Damjan" <dj19@email.si> wrote in message
news:zVLrb.5378$2B6.1040547@news.siol.net...
> Hi!
>
> I have found many security event like this one..
>
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 540
> Date: 9.11.2003
> Time: 10:59:19
> User: NT AUTHORITY\ANONYMOUS LOGON
> Computer: BLUEBOX
>
>
> OS is WinXP SP1.
> I'm wondering, who or what cause this audit? I haven't any users or remote
> logon support, and guest accaunt is disablet too!
>

Does it happen around boot/startup time? It's probably some local service
logging itself on.

         DaveK

--
moderator of
alt.talk.rec.soc.biz.news.comp.humanities.meow.misc.moderated.meow
Burn your ID card!  http://www.optional-identity.org.uk/
Help support the campaign, copy this into your .sig!
Proud Member of the Exclusive "I have been plonked by Davee because he
thinks I'm interesting" List Member #<insert number here>
Master of Many Meowing Minions
Holder of the exhalted PF Chang's Crab Wonton Award for kook spankage above
and beyond the call of hilarity.
PGP Key-ID: 0x0FB504D1 Fingerprint 04B7 2E8C 0245 680E  6484 C441 CEC7 D2BD


Relevant Pages

  • Re: Anonymous logon
    ... > I have found many security event like this one.. ... > Event Type: Success Audit ... > logon support, and guest accaunt is disablet too! ... Proud Member of the Exclusive "I have been plonked by Davee because he ...
    (alt.computer.security)
  • Anonymous logon
    ... I have found many security event like this one.. ... Event Type: Success Audit ... Event Category: Logon/Logoff ... logon support, and guest accaunt is disablet too! ...
    (alt.computer.security)
  • Anonymous logon
    ... I have found many security event like this one.. ... Event Type: Success Audit ... Event Category: Logon/Logoff ... logon support, and guest accaunt is disablet too! ...
    (comp.security.misc)