Disabled IIS Anonymous account

[Boogie Woogie Flu]

I'm running an IIS FTP server on W2k Server SP3. I don't allow anonymous
logins and I have the anonymous account disabled.

I have auditing enabled for login success and failure. Why am I seeing
"Success Audit" events in my security log for this account?

 

[Jason Conradt]

IUSR_computername is used for impersonation when you check "allow IIS to
control password". It's also used if you configure FTP to allow anonymous.

http://www.microsoft.com/windows200...ication_and_allow_iis_to_control_password.asp

 

[Jason Conradt]

It's not if you're using anonymous auth for FTP or IIS, change
authentication types.

 

[Boogie Woogie Flu]

Thanks for your response, but did you read the post? I explained that I
don't allow anonymous access in IIS and that the anonymous account
(IUSR_computername) is disabled.

My question is why do I still see "Success Audit" for logins on this account
in my security log when the account is disabled?