Unusual logon / logoff Security event log

Hi there,

Has this repeat entries of event ID 540, 538, 608 in a row for particular
user.

Another preculiar is for example event ID 540, On the event id, the logon
type said 3, however when check on the link on the event ID which said logon
type is 4. So I am totally confused whether this is logon type 3 or logon
type 4. On the webpage, type 3 is network, type 4 is batch.
Logon type Logon title Description
2 Interactive A user logged on to this computer at the console.
3 Network A user or computer logged on to this computer from the
network.
4 Batch Batch logon type is used by batch servers, where processes
might run on behalf of a user without the user's direct intervention.


Anyone has any idea ? Is this a security concern or not.

Kind regards


.

Relevant Pages

  • Re: Sudden and repeated launching of cmd.exe and net.exe
    ... earlier suggestion to check the Task Scheduler for a batch ... and changing it to run only at logon. ... I will put the two kill commands on my ... >The Task manager will also display process users names ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: IWAM account
    ... Check the user right "logon as batch", and add the iwam account to have ... This appears to be a negotiate failure due to logon as batch. ... - Network ...
    (microsoft.public.inetserver.iis.security)
  • Re: Scheduled Task wont run unless use Admin account
    ... When you said "You may need to add the user/ group 'logon as batch job' ... and Bypass Traverse Checking directly to the desired account, ... If I am interactively logged in as the target account, ...
    (microsoft.public.windows.server.general)
  • Re: Scheduler Failed
    ... The log on as batch files I already try before. ... > 'logon as batch job' rights. ...
    (microsoft.public.win2000.general)
  • Copying files based on date during logon
    ... I am a scripting neophte, to put it in a nice fashion... ... I have a batch file that is called via GPO during the logon ... which copies a file from a network location to the ...
    (microsoft.public.windows.server.scripting)