General discussion

Locked

Windows 2000

By kdyck ·
I have enabled auditing on my Win2k pro machine and have restricted access to everybody but myself and the team I work with. When I check the event log (security) sometimes I see a SUCCESS audit for logon/logoff (event ID: 538) for ANONYMOUS LOGON. If I have locked out everybody but myself and my group of peers, how come this event is getting logged?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Windows 2000

by Raffi_ In reply to Windows 2000

Win2K creates, by default, a number of "internal" groups. One of these is "anonymous logon".

Because you cannot alter the membership of these groups, the groups are not listed in Active Directory Users and Computers. However, these groups are used for operations such as assigning permissions to directories, files, shared network directories, or printers. I do not know precisely which service is triggering your anonymous login but a little more digging in the KB should resolve that.

Regards
Raffi_

Collapse -

Windows 2000

by kdyck In reply to Windows 2000

Thanks for the help!!

Collapse -

Windows 2000

by kdyck In reply to Windows 2000

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Operating Systems Forums