<div>
The solution pointed me in the right direction.
</div>


The solution pointed me in the right direction.

<div>
<div class="content wysiwyg-content">
Hello Experts,<br />
I have a client that is running into an issue with the security logs filling up and users cannot access the computer. &nbsp;After looking at several of the events I am a bit concerned about the &quot;logon account&quot; . &nbsp;The names listed keep changing? &nbsp;Like someone is trying to hack into the computer.<br />
<br />
I will attach a couple screen shots for your review.<br />
<br />
I would like some help analyzing this issue.<br />
<br />
Thanks! <a href="https://filedb.experts-exchange.com/incoming/2011/05_w19/456680/Event-Log-Sample.pdf" target="_blank" class="file-inline" title="Event Log - Screen Shot (69 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Event-Log-Sample.pdf</a>
</div>
</div>


Event-Log-Sample.pdf

Hello Experts,
I have a client that is running into an issue with the security logs filling up and users cannot access the computer.  After looking at several of the events I am a bit concerned about the "logon account" .  The names listed keep changing?  Like someone is trying to hack into the computer.

I will attach a couple screen shots for your review.

I would like some help analyzing this issue.

Thanks! 

Event ID 680 Audit Failure - concerned about logon account

Microsoft Windows XP is the sixth release of the NT series of operating systems, and was the first to be marketed in a variety of editions: XP Home and XP Professional, designed for business and power users. The advanced features in XP Professional are generally disabled in Home Edition, but are there and can be activated. There were two 64-bit editions, an embedded edition and a tablet edition.

Windows XP

Operating system security (OS security) is the process of ensuring OS integrity, confidentiality and availability. OS security refers to specified steps or measures used to protect the OS from threats, viruses, worms, malware or remote hacker intrusions. OS security encompasses all preventive-control techniques, which safeguard any computer assets capable of being stolen, edited or deleted if OS security is compromised, including authentication, passwords and threats to systems and programs.