anonymous logon in security event viewer

K

Kendall

Network-WAN, several servers are auditing successful and
denied logon. In the event viewer under securities, there
are several instances of successful anonymous logon with
event id 538 at all hours of the day and night.

What may be causing this anonymous login when our
firewall prohibits anonymous logon.
 
J

Jack Seredyniecki

Are you running IIS with intranet/internet websites allowing anonymous
connections?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Successive Anonymous Logon events in security log 3
anonymous logon 5
Anonymous Logon's 1
ANONYMOUS LOGON without logoff 4
Security log shows multiple ANONYMOUS LOGON 2
Unexplained 540 Events in Security log on W2K workstation in a dom 0
Event ID 538 Logon Type 3 NT AUTHORITY/ANONYMOUS LOGON 15
nt authority\anonymous logon in security event log 1

Top