Re: Windows 2000 Security Log

The operating system does use null sessions for more than a few functions
mostly related to networking and browse list activity. I would not worry
about them as long as you have a firewall protecting your network to prevent
internet users from trying to enumerate user names and then access your
computer using them by guessing their password and your user are using
strong passwords and protecting access to network resources using principle
of least privilege. I have seen anonymous access in the logs of about every
computer I have checked. For instance if you try to access another computer
through my Network Places you most likely will then see anonymous access in
events on the computer you are trying to access and the master browser or
backup browser. Computers that have the guest account enabled to allow
anonymous user access to shares or XP Home will show lots of anonymous
access type 3 logon events. I hope you have the guest account disabled
unless you have a good reason not to.--- Steve

http://support.microsoft.com/?kbid=246261 --- info on anoymous access for
Windows 2000

"thirts4knowledge" <esquire.constantine@xxxxxxxxx(donotspam)> wrote in
message news:407CB3CA-EA17-497B-8A79-BE8D8F9DAAB3@xxxxxxxxxxxxxxxx
I use Windows 2000 Professional SP4

I need to know if the following event description is somethiung that I
should worry about. If not, why not?

Category: Privilege Use
Success: Event ID: 576
User: NT AUTHORITY/ANONYMOUS LOGON

User Name:
Domain:
Logon ID: (0X0,0XCC77)
Assigned: SecChangeNotifyPrivilege

I see this after I logon using my admin/or power user account and
sometimes
randomly. Most of my concern stems from the "ANONYMOUS LOGON" portion.

Any guidance that you have would be greatly appreciated

Thanks in advance


.

Relevant Pages

  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.general)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.dns)
  • Re: Logon Server Unavailable
    ... There are currently no logon servers available to service ... You use a office laptop to connect the office VPN, when you map a network ... you may receive this message: "This account is the ... The server is not configured for transactions"> "A domain controller for your domain could not be contacted" ...
    (microsoft.public.windows.server.networking)
  • Re: Logon Server Unavailable
    ... The server is not configured for transactions" ... "Access Denied" Message When Opening from or Saving to a Network Folder ... Logon unsuccessful: The user name you typed is the same as the user name you ... "An error occurred while renewing interface local area connection" While ...
    (microsoft.public.windows.server.general)
  • Re: Logon Server Unavailable
    ... The server is not configured for transactions" ... "Access Denied" Message When Opening from or Saving to a Network Folder ... Logon unsuccessful: The user name you typed is the same as the user name you ... "An error occurred while renewing interface local area connection" While ...
    (microsoft.public.windows.server.dns)