Advapi Events - Log on/off - Should I be suspicious of these??

From: Emdee (mikeDONTSPAM@webheat.co.uk)
Date: 02/20/03


From: "Emdee" <mikeDONTSPAM@webheat.co.uk>
Date: Thu, 20 Feb 2003 17:58:22 -0000


----------------------------------------------------------------------------

--
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date:  20/02/2003
Time:  17:24:00
User:  *ServerName*\*UserName*
Computer: *ServerName*
Description:
Successful Logon:
  User Name: *UserName*
  Domain:  APP3
  Logon ID:  (0x0,0xE5F358A)
  Logon Type: 4
  Logon Process: Advapi
  Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name: *ServerName*
----------------------------------------------------------------------------
--