Re: Anonymous Logoffs without Logons

From: Eric Fitzgerald [MS] (ericf@online.microsoft.com)
Date: 06/05/02 

From: "Eric Fitzgerald [MS]" <ericf@online.microsoft.com>
Date: Tue, 4 Jun 2002 15:57:08 -0700

Elliot, can you post an example of such a logoff event?

Thanks,

Eric 

--
Eric Fitzgerald
Program Manager, Windows Auditing and Intrusion Detection
Microsoft Corporation
"Elliot Gingold" <elliotg@unimelb.edu.au> wrote in message
news:uXXZbjqBCHA.2024@tkmsftngp04...
> I have been looking at the security logs of a number of NT4 and Windows
2000
> Advanced Servers and noticed something I cannot understand. On some
machines
> of both types I find 538 events reporting logoffs from anonymous logons.
> But, even with extensive searching of the log, I cannot find the
> corresponding logons.
>
> (I also see some occuring in pairs as would be expected. Anonymous logons
> are allowed as we have Mac users who need them for password changes).
>
> Elliot
>
>
Quantcast