Anonymous Logons

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: "mpchong" <mpchong@xxxxxxxxxxxxxxxxxxxxxxxxx>
Date: Mon, 18 Apr 2005 09:13:06 -0700

Hello,

We are on 2003AD. We are getting a lot of anonymous logons in the event log,
particularily 684, 642, 627. Also some of the 684 references a domain admin
account that is never used.

Set ACLs of members in administrators groups:
Target Account Name: EmErg
Target Domain: DC=ucfsd,DC=uc,DC=local
Target Account ID: ucfs-ca\EmErg
Caller User Name: DC1$
Caller Domain: UCFS-CA
Caller Logon ID: (0x0,0x3E7)
Privileges: -

Has anyone seen this event?
We also are using Exchange Webmail, does webmail generate alot of anonymous
logons?

Thank you,

Mike

.

Prev by Date: Very problematic issue with Removable Storage causing data loss! b
Next by Date: Re: RIS OSC customisation question
Previous by thread: Very problematic issue with Removable Storage causing data loss! b
Next by thread: Unable to log on locally after Windows 2003 SP1
Index(es):
- Date
- Thread

Relevant Pages

Re: Anonymous login
... You could turn off logon/logoff auditing :-) ... There are many reasons why you'd see anonymous logons in your event log, ...
(microsoft.public.security)
Re: Help me prevent "Anonymous Logons"
... networking cable, and reboot, then are you still seeing these ... in the event log in the morning? ... at boot time are normal events. ... > checked the Event Viewer and there are "Anonymous Logons" ...
(microsoft.public.windowsxp.security_admin)