Avatar of J.R. Sitman
J.R. Sitman
Flag for United States of America asked on

Security Audit Event 5152. Is this a concern?

I'm getting the attached event.  Do I need to be concerned?
audit.jpg
Windows Server 2008Active Directory

Avatar of undefined
Last Comment
J.R. Sitman

8/22/2022 - Mon
Radhakrishnan

Hi,

This looks like the windows firewall hasn't set correctly for the inbound traffic. Also, it could be edge traversal settings. Have a look at this MS article and try to set edge traversal and see it stops the event.
 http://technet.microsoft.com/en-us/library/ee649264(v=ws.10).aspx
J.R. Sitman

ASKER
The Windows firewall on that server is off.  If it's not a concern, then I can just ignore it, correct?
ASKER CERTIFIED SOLUTION
Radhakrishnan

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
SOLUTION
Sarang Tinguria

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
⚡ FREE TRIAL OFFER
Try out a week of full access for free.
Find out why thousands trust the EE community with their toughest problems.
J.R. Sitman

ASKER
I applied the patch.  I'll monitor it and post later.

Thanks
Experts Exchange has (a) saved my job multiple times, (b) saved me hours, days, and even weeks of work, and often (c) makes me look like a superhero! This place is MAGIC!
Walt Forbes
J.R. Sitman

ASKER
Thanks.  I applied the patch and blocked the ip address.