Event ID 538 and 540 : Security threat? Tags: Security Event Id Windows XP Last response: May 1, 2005 2:37 PM in Windows XP Share Anonymous a b 8 Security April 29, 2005 1:20:06 PM Archived from groups: microsoft.public.windowsxp.security_admin (More info?) I saw some logs in my Boss XP machine with SP2. Some notable logs in Security were Event ID 538 and 540 Category : Logon/Logoff User: NT AUTHORITY\ANONYMOUS LOGON Source:Security Type: Success/Audit what is the best explanation for this? He is thinking that there is an anonymous logging remotely to his machine? Thank you More about : event 538 540 security threat Anonymous a b 8 Security May 1, 2005 2:37:18 PM Archived from groups: microsoft.public.windowsxp.security_admin (More info?) http://www.eventid.net/display.asp?eventid=538&eventno=... http://support.microsoft.com/kb/122702 http://support.microsoft.com/kb/140714 http://support.microsoft.com/kb/174074 http://support.microsoft.com/kb/318253 http://support.microsoft.com/kb/828020 http://support.microsoft.com/kb/828857 http://www.eventid.net/display.asp?eventid=540&eventno=... http://support.microsoft.com/kb/287537 http://support.microsoft.com/kb/300692 http://support.microsoft.com/kb/326985 Austin M. Horst Can't find your answer ? Ask ! Publish Related resources Event ID 538/540/576 fills up Security Log!! Forum Event Error Logs with Event ID 538 and 540 Forum Event ID 538 & 540 whenuser did not logon Forum Event ID 576/538 - Guest Logon Forum Event Id: 538 Forum Event id 538 not being recorded Forum Event ID 538 Logon Type 3 NT AUTHORITY/ANONYMOUS LOGON Forum Anon Logon Events 538/540 Forum Event ID 540 Forum TM Titanium Internet Security & Event ID 490? Forum Event ID 577 & 578 are filling Security Event Logs Forum Security Event ID 534 Forum Security Event ID 675 Forum Event ID 1202 Security policies are propagated with warnin.. Forum More resources Read discussions in other Windows XP categories Configuration Customization Drivers Security Video !