Strange Login events



Hello,

yesterday I activated the logging of the logins and now in the security events I have many logins as "administrator" and as "anonymous".
I am sure that no user logged in at this time in the night.
Are this entries generated by services ?

The event entries differ also in the count of description lines ( only 4 ) and the login Type ( ? Anmeldetyp in German ). The user logins are of type 3 while this entries are of type 2

Can anyone explain me please what happen on this machine ?

Thanks
Andreas
.



Relevant Pages

  • Re: Audit Object Access
    ... object access can generate a lot of entries because W2K will do auto ... security policy for the effective setting under security options for "audit ... > Object Server: Security ...
    (microsoft.public.win2000.security)
  • Re: Syslog to monitor traffic
    ... That's far too much to watch in real time, ... set the logging level to include such items: ... because you could get an overwhelming amount of entries. ...
    (comp.dcom.sys.cisco)
  • Re: Webserver Security Logs
    ... i turned off file & print sharing as suggested and that did it. ... the weekend to see what kind of log entries, ... webserver, if you have it running and I believe those events will go away. ... read more about that in the free Windows 2000 Security Hardening Guide. ...
    (microsoft.public.win2000.security)
  • Re: Security audit file shows users continually loggin on and off
    ... machines) logging in and out of the server. ... I noticed in the security log file that I have entries of users loggin ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security audit file shows users continually loggin on and off
    ... machines) logging in and out of the server. ... I noticed in the security log file that I have entries of users loggin on ... seeing the Administrator logging on and off as well and this troubles me. ...
    (microsoft.public.windows.server.active_directory)