Hi There,
I have noted on my Windows 2003 servers, that I get these logon messages in the security field of eventvwr.
Now, I've checked and I can see that this message is generated when any standard TCP/IP traffic hits the machine that doesn't require authentication (Ie connecting using VNC etc) these are generated.
I take it shutting down the ability to Logon Anonymously will cause serious problems..? (As my boss wants me to do this!)
Thanks,
Mike F
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x23DF47A7)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: PC0018
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 197.1xx.44.18
Source Port: 0
Michael Firth
IT Systems Assistant
~If it's not broke, break it~
I have noted on my Windows 2003 servers, that I get these logon messages in the security field of eventvwr.
Now, I've checked and I can see that this message is generated when any standard TCP/IP traffic hits the machine that doesn't require authentication (Ie connecting using VNC etc) these are generated.
I take it shutting down the ability to Logon Anonymously will cause serious problems..? (As my boss wants me to do this!)
Thanks,
Mike F
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x23DF47A7)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: PC0018
Logon GUID: -
Caller User Name: -
Caller Domain: -
Caller Logon ID: -
Caller Process ID: -
Transited Services: -
Source Network Address: 197.1xx.44.18
Source Port: 0
Michael Firth
IT Systems Assistant
~If it's not broke, break it~
