Security Audit

From: Kaushal Shah (cryskns1@yahoo.com)
Date: 06/01/02 

From: "Kaushal Shah" <cryskns1@yahoo.com>
Date: Sat, 1 Jun 2002 08:53:21 -0700

Hi, I understand this event log says the user has logged in on the server.
But, could someone explain me what exactly this means? I have this user in
my user list but its like windows has created the user on its own. This is
Win2k Server event log on which the below entry is appearing. Also I am
curious to find out the reason for this event appearing. Nobody has logged
into the server at the time of the entry.
Thanks, Kaushal

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 6/1/2002
Time: 1:12:09 AM
User: KNSSERVER\IUSR_KAUSHAL-SERVER
Computer: KNSSERVER
Description:
User Logoff:
User Name: IUSR_KAUSHAL-SERVER
Domain: KNSSERVER
Logon ID: (0x0,0xC8984)
Logon Type: 3

Relevant Pages

  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... Microsoft Windows Small Business Server 2003 Best Practices Analyzer ... After that, please post any event log errors, just the EventID# and Source names, not the whole error message. ... error 15100 Win32 Error 15100. ... One is indicating it can't retrieve info about the System log. ...
    (microsoft.public.windows.server.sbs)
  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... test network connectivity to local domain controllers. ... Directory Server Diagnosis ... Verifying that the local machine ALPHA, ... The File Replication Service Event log test ...
    (microsoft.public.windows.server.sbs)
  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... Microsoft Windows Small Business Server 2003 Best Practices Analyzer ... After that, please post any event log errors, just the EventID# and Source names, not the whole error message. ... (Event String (event log = Directory Service) ...
    (microsoft.public.windows.server.sbs)
  • Re: Server2003 2008 error !!
    ... Remove the x.x.1.x form the NIC of the DCs and configure it as a FORWARDER or use directly the ISPs DNS server as Forwarders in the DNS server properties in the DNS management console. ... On the 2008 make sure the internal firewall is not blocking AD replication, by default the firewall is enabled ion 2008. ... The event log File Replication Service on server ... EventID: 0x000003EE ...
    (microsoft.public.windows.server.active_directory)
  • Re: What are the best general things to do after a dirty shutdown (Server SBS)
    ... Microsoft Windows Small Business Server 2003 Best Practices Analyzer ... After that, please post any event log errors, just the EventID# and Source names, not the whole error message. ... One is indicating it can't retrieve info about the System log. ...
    (microsoft.public.windows.server.sbs)