Sign in with
Sign up | Sign in
Your question

Event Viewer, Netlogon 5807

Tags:
  • Security
  • Netlogon
  • Event Viewer
  • Domain Controller
  • Business Computing
Last response: in Business Computing
Share
January 12, 2012 8:58:50 PM

Hello,
"...there have been 133 connections to this Domain Controller from client machines whose IP addresses don't map to any of the existing sites in the enterprise." How does one track the above IPs/source?

More about : event viewer netlogon 5807

a b 8 Security
January 12, 2012 9:37:14 PM

Those connections are likely from websites and update servers. You can always NSLOOKUP the IP addresses.....
January 12, 2012 9:48:12 PM

How do you find the IP addresses? The netlogon log time stamps and event viewer system's time stamp do not correlate. The time that netlogon warning occurred in the event viewer falls between the timestamps of the netlogon file. Kindly advise.
!