Re: event id 540

From: alan (aj008us_at_hotmail.com)
Date: 07/02/03 

Date: Wed, 2 Jul 2003 13:44:35 -0700

Why is it normal to see from "Anonymous"?

Also, if it from someone else, does it mean someone logged
on to his machine. if so that would be security issue.?

>-----Original Message-----
>540 is a network logon, it means someone/something
accessed the computer
>over the network. Absolutely normal to see these
for "Anonymous".
>Otherwise, could be file sharing, printer sharing, etc.
>
>--
>Eric Fitzgerald
>Program Manager, Windows Auditing
>Microsoft Corporation
>
>The above message is provided "AS-IS" with no warranties,
and confers no
>rights.
>
>"Alan" <aj008us@yahoo.com> wrote in message
>news:02b201c340c6$c9f7ac20$a301280a@phx.gbl...
>> we are seeing event id 540 under security logs of few
>> workstations. the user that genrated the id is someone
>> else then the workstation owner. So mgmt trying to
figure
>> out what does it mean. does it mean the user tried to
>> access this workstation remotly.
>> can someone explain?
>> thanks
>
>
>.
>

Relevant Pages

  • Re: my network places setup
    ... my file sharing is on, the server, workstation and computer browser are all automatic and started. ... In Windows XP SP2 make sure that the Windows Internet Connection ... In Windows XP make sure that the Server, Workstation and Computer ...
    (microsoft.public.windowsxp.general)
  • error occurred opening that folder on the ftp server
    ... use protection with file sharing. ... >On one particular workstation when I login as ... I am unable to access our ftp server. ... WindowsUser1 has admin rights to the computer. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: event id 540
    ... 540 is a network logon, it means someone/something accessed the computer ... Otherwise, could be file sharing, printer sharing, etc. ... > else then the workstation owner. ...
    (microsoft.public.win2000.security)
  • Re: Share folder on XP workstation within a domain
    ... We can see the workstation via My Network Places but it does not show an available shared folder and when we try to open the workstation name is says Permission is denied. ... It wouldn't be a Group Policy setting unless your domain administrator has deliberately prohibited file sharing; in which case there's very little to be done about it. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event ID 537
    ... It looks like a cryptographic error upon a network logon ... workstation to the domain. ... This SBS 2003 SP1 Premium server seems to otherwise be running OK. ...
    (microsoft.public.security)
Quantcast