Hardwarez
asked on
Security log event 540 anonymous logon. Ok? Why and how?
Security log event 540 anonymous logon. I see that my log is full of theses starting a couple months ago. This machine is a mail server and should only have traffice from me via terminal services and the normal smtp and pop traffice.
What does this event mean? Is someon logging onto this machine?
MSG:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0xD50841)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: ONEFIFTYFIVE
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.1.155
Source Port: 0
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
What does this event mean? Is someon logging onto this machine?
MSG:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0xD50841)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: ONEFIFTYFIVE
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 192.168.1.155
Source Port: 0
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you!
ASKER