Sign in with
Sign up | Sign in
Your question

Anonymous logon in the event que list

Last response: in Networking
Share
October 14, 2006 12:22:58 PM

Hi Everyone,

I am running MS Windows XP home edition.

I am getting a lot of Anonymous Login in the event queue from unknow IP
addresses.

Here is an example of info from one of the events.

Event=
Date:x.x.x
Time:X:X:X
Source: Security
Category : Logon/Logoff
Type: Success Audit
Event ID: 540
User: NT/AUTHORITY/ANONYMOUS LOGON
Computer: AMD 3200

Description=
Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x15727)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name:
Logon GUID: {00000000-0000-0000-0000-000000000000}

i do not have an anonymous account to the best of my knowledge at least I did not create one.

I have googled the web for help. I have searched MS support pages and looked in some MS Server books but cannot find anything to any insight into what is going on.

Can someone please tell me what I need to do to stop this or disable/block anonymous login on XP home edition.

Thankyou verymuch,
Prakash
October 25, 2006 4:44:44 PM

i have the same problem too,but there is more,if i get this message,my internet connection stops,pls help
October 25, 2006 11:59:29 PM

Just a thought, If you are use MS FW disable allow exections. Everyone that install software think the they need free relm, In reality they only needed it when you want them to have it. Dump it for Comodo FW, and use a hardware firewall (router). More layers the better.

Do a full virus scan, spyware, addware, and root scan.

As a rule if you havn't all ready add a admin password. This is over looked by most.
!