anonymous login/logout event 538/540

Posted: 09-16-2003, 10:52 PM

I have just become aware of something in my security logs which puzzles
and bothers me.
There are a large number of entries for login/logout that I have no
idea why. Many of these are from a "anonymous" user. Here is the
listing for one example:

Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x17CC7F)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: HOME-COMPUTER
Logon GUID: {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

Note that the computer on which this log occurs is called OFFICE-
COMPUTER. HOME-COMPUTER is another computer I have which is connected
to this one via a router (which also has a cable/modem connected).

There are even a few entries for GUEST, even though I have the
"guest" account disabled on both computers.

FWIW, OFFICE-COMPUTER is running WinXP Pro with NTFS file system. HOME-
COMPUTER is running WinXP Home with Fat32 file system.

I might add that I have also seen similar entries in the security log
for HOME-COMPUTER, except that if I recall correctly, they say that the
login/logout came from anonymous or guest at HOME, not OFFICE. I do
have guest disabled on HOME also.

I might also add that the lights on the router and also on the cable
modem are frequently flashing at a high rate, even though there is no
traffic coming or going to the internet (that I know of).

--
R. Dale Shipp
dale@min.net
Reply With Quote

Responses to "anonymous login/logout event 538/540"

 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
Automatic Login and then Logout Gonzalo Windows Vista Administration 3 04-12-2008 07:36 PM
Upgraded to 6.1, login followed by a quick logout. Joe Windows XP Messenger 6 12-08-2003 07:44 PM
Anonymous Login?? TonyP Windows XP Work Remotely 1 10-04-2003 03:49 AM
anonymous logon in event viewer aaak Windows XP Security & Administration 1 09-15-2003 03:17 AM
How do I disable anonymous login? elyse meekins Windows XP Security & Administration 1 08-05-2003 04:35 PM


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90