Event Logs

  • Thread starter Thread starter barrycuda72
  • Start date Start date
B

barrycuda72

I have been looking at the security logs on one of my workstations.
It is Windows XP Pro and the name of the machine is \\Whatever
In the security log I see something like this

Event ID:540

Successful Network Logon
UserName: Test
Domain: Acme
Login ID: (bunch of numbers)
Login Type: 3
Login PRocess: NtLmSsp
Workstation Name \\Testmachine
Logon GUID: (bunch of numbers)

Why would a logon event for the user test going to the workstation Testmachine
be logged on this workstation???
 
Back
Top