Event ID 20158 and 20159
Posted on 2006-05-04
The other night one of my Windows 2000 file servers logged the following events (a couple of times over a five minute period).
EventID 20158, RemoteAccess
The user pppaccount successfully established a connection to RAC Connection using the device RACPORT.
EvendID 20159, RemoteAccess
The connection to RAC Connection made by user pppaccount using device RACPORT was disconnected.
Problem: There are no accounts but the defaults on this server (specifically, pppaccount) and it is not a terminal or remote access server anyway. What is this? What should I do? Thanks!