PC Review Forums Newsgroups Windows XP Windows XP Security NT AUTHORITY\ANONYMOUS LOGON type 3

Reply

NT AUTHORITY\ANONYMOUS LOGON type 3

 
Thread Tools Rate Thread
Old 17-06-2004, 10:42 PM   #1
=?Utf-8?B?R3VpZ29DTFQ=?=
Guest
 
Posts: n/a
Default NT AUTHORITY\ANONYMOUS LOGON type 3


I got the following message on Event Viewer and I know that type 3 is user from network logged. Is that critical? If yes, is there a way to block it?

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 6/17/2004
Time: 4:30:00 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: LAPHOME
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x12E3D)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

  Reply With Quote
Old 18-06-2004, 03:54 AM   #2
Roger Abell
Guest
 
Posts: n/a
Default Re: NT AUTHORITY\ANONYMOUS LOGON type 3

You could turn on your firewall..
With Pro version there are some local security policy
settings you can use to impact null session / anonymous
login.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"GuigoCLT" <GuigoCLT@discussions.microsoft.com> wrote in message
news:E77F0306-1889-4A8A-A4D4-C51678FB03B6@microsoft.com...
> I got the following message on Event Viewer and I know that type 3 is user

from network logged. Is that critical? If yes, is there a way to block it?
>
> Event Type: Success Audit
> Event Source: Security
> Event Category: Logon/Logoff
> Event ID: 540
> Date: 6/17/2004
> Time: 4:30:00 PM
> User: NT AUTHORITY\ANONYMOUS LOGON
> Computer: LAPHOME
> Description:
> Successful Network Logon:
> User Name:
> Domain:
> Logon ID: (0x0,0x12E3D)
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package: NTLM
> Workstation Name:
> Logon GUID: {00000000-0000-0000-0000-000000000000}
>
> For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.
>



  Reply With Quote
Reply



Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off