A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

NT AUTHORITY\ANONYMOUS LOGON type 3



 
 
Thread Tools Display Modes
  #1  
Old June 17th 04, 10:45 PM
GuigoCLT
external usenet poster
 
Posts: n/a
Default NT AUTHORITY\ANONYMOUS LOGON type 3

I got the following message on Event Viewer and I know that type 3 is user from network logged. Is that critical? If yes, is there a way to block it?

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 6/17/2004
Time: 4:30:00 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: LAPHOME
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x12E3D)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Ads
  #2  
Old June 18th 04, 05:44 AM
Roger Abell
external usenet poster
 
Posts: n/a
Default NT AUTHORITY\ANONYMOUS LOGON type 3

You could turn on your firewall..
With Pro version there are some local security policy
settings you can use to impact null session / anonymous
login.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"GuigoCLT" wrote in message
...
I got the following message on Event Viewer and I know that type 3 is user

from network logged. Is that critical? If yes, is there a way to block it?

Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 540
Date: 6/17/2004
Time: 4:30:00 PM
User: NT AUTHORITY\ANONYMOUS LOGON
Computer: LAPHOME
Description:
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x12E3D)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 11:31 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.