I am supporting a PDC with twenty five clients. We run full backups twice a week.
As I review the security logs each day, I notice entries during backups indicating administrator logons and logoffs during the time the backup was running. The server is locked when I am not using it and I find it very surprising to see these kind of entries.
Other entries I see involve permissions changed directly related to the backup and these do not concern me greatly.
I have showed these logs to other administrators at our various offices and they did not understand them either.
I checked technet and the resource kit without finding out anything.
I was hoping somebody here might have seen entries similar to what I am describing and could possibly explain them.
Thank you for your assistance,
