Secuity Event Log on Citrix XP server

[DarraghFitzpatrick]

Each day approximately 300 times I receive Event 681 in my security event log
Description
The logon to account: Anon006
by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
from workstation: LYNN
failed. The error code was: 3221225578

Each logged event is either for a different AnonXXX user or Administrator account. The workstation the request comes from is changes. These are logons from outside my LAN.

Is this a common occurrence on a citrix server ? sice an ICA gateway is open, do people just attempt to access it using random login programs/processes ?

Darragh

 

[JohnTcolo]

No, this is not common. Probably should not allow anonymous logins to the Citrix box. Make users use your AD info (account/password).

 

[xs4citrix]

http://support.microsoft.com/default.aspx?scid=kb;en-us;273499

http://www.printingsupport.com

Free citrixprinting support

 

[DarraghFitzpatrick]

I do not have anonymous connections open on my citrix server. I am aware the error code listed in the microsoft event log means that a username or password failure has occurred when somebody tried to logon as the user listed in the event log.
What I am wondering is, what could be causing this issue.
Citrix creates the Anonxxx users upon installation. Disable them and citrix use can be affected.
I was wondeirng if anybody has come across this eventr on their citrix farm before.