Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations bkrike on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Event ID 538 and 540 (logoff and network logon)

Status
Not open for further replies.
crows27

crows27

MIS
Sep 4, 2001
80
US
I'm seeing these events in my audit log during all hours of the day....including times when no employees are working. Is this normal? I don't have remote access enabled right now as i make some changes. The user it says is system, anonymous and administrator.

thanks
 
Sort by date Sort by votes
Are you running a web server. It sounds like anonymous would be associated with the web server.
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

DTGMI
  • Locked
  • Question
WIN 10 Pro PC & Adding back to our Network
Replies
0
Views
608
DTGMI
DTGMI
MattM1975
  • Locked
  • Question
Domain Admin Logon 1
Replies
2
Views
373
ADB100
ADB100
mangentle
  • Locked
  • Question
What could be the potential causes if a Microsoft Windows Server is experiencing slow network!
Replies
1
Views
1K
gbaughma
gbaughma
nukeinfer
  • Locked
  • Question
Internet restrictions for isolated PCs in the Network
Replies
1
Views
650
mangentle
mangentle
andyferris
  • Locked
  • Question
DC Event logs auditing cannot be set by GPO
Replies
1
Views
343
RRankin355
RRankin355

Part and Inventory Search

Sponsor

Back
Top