Event ID 538 and 540 : Security threat?

G

Guest

I saw some logs in my Boss XP machine with SP2.
Some notable logs in Security were Event ID 538 and 540

Category : Logon/Logoff
User: NT AUTHORITY\ANONYMOUS LOGON
Source:Security
Type: Success/Audit

what is the best explanation for this? He is thinking that there is an
anonymous logging remotely to his machine?

Thank you
 
A

Austin M. Horst

http://www.eventid.net/display.asp?eventid=538&eventno=7&source=Security&phase=1
http://support.microsoft.com/kb/122702
http://support.microsoft.com/kb/140714
http://support.microsoft.com/kb/174074
http://support.microsoft.com/kb/318253
http://support.microsoft.com/kb/828020
http://support.microsoft.com/kb/828857

http://www.eventid.net/display.asp?eventid=540&eventno=9&source=Security&phase=1
http://support.microsoft.com/kb/287537
http://support.microsoft.com/kb/300692
http://support.microsoft.com/kb/326985


Austin M. Horst
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Event Error Logs with Event ID 538 and 540 1
Why are there repeated Event 540 and Event 538 entries every 10 minutes? 2
Unexplained 540 Events in Security log on W2K workstation in a dom 0
Security Event Logs / Network access 1
Security event 1
Many ANONYMOUS LOGON in Security Event Log 8
Event Viewer 5
Event ID 538 3

Top