Security event 538, 540



Suddenly, we're getting a ton of security event ids 538 and 540 on one of
our domain controllers. Furthermore a number of the workstations are also
getting these same events indicating successful anonymous and/or remote
logons.

This does not seem good. Please HELP!
thanks, Joel


.


Loading