adminknight
asked on
Getting loads of Event ID 4000 late at night
I'm getting around 30-100 of the event ID: 4000 each night. They can't connect to domains such as zmailz.com or publicrecordsnow.com or dxsspc1.com etc etc. Just curious if this means I've got a machine on our network trying to spam outside email? How do i track this down?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Why possibly? You need to provide the Event Source as well. It could also be this for example http://support.microsoft.com/kb/899392