Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Forums > System Security

Vista - Event ID 4624 Successful (Anonmymous) Logon

Reply
 
Old 10-15-2009   #1 (permalink)


vista home
 
 

Event ID 4624 Successful (Anonmymous) Logon

Hello,

I have a system that many Event ID 4624 Successful (Anonmymous) Logon with the corresponding 4634 Logoff's. The account name is ANONYMOUS, with NO network information what so ever on any of the event entries with the account domain as NT AUTHORITY. There is a total of 1185 over a 12 month period.
These are all Logon Type 3 (network)
Are there any legitimate reasons for this? How come there is NO source IP or workstation name listed on any of these? This is on a Windows Vista system. There is an a IIS_IUSR account, but the system is not suppose to be running a webservice. Though not sure how I can check. Is there any registry keys that would show this? All I have is a dead system image, and I can't boot it up.
Thanks,

My System SpecsSystem Spec
Old 10-15-2009   #2 (permalink)


Windows Vista Enterprise x64 SP2
 
 

Re: Event ID 4624 Successful (Anonmymous) Logon

Hmmmm...


Network (i.e. connection to shared folder on this computer from elsewhere on network)
(logon type 3).

I would remove remote access if you have this established. I'm not knowledgeable about this message and it may refer to something innocent, but let's go ahead and close access if that is currently available.
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Vista event 4634 4624 Vista General
The system event notification service service failed logon ... token does not exist General Discussion
Retrieving Logon Event and corresponding User ID on Vista withPowershell PowerShell
Event ID 12 "Successful auto delete of third-party root certificat Vista security
Successful burn, Successful install, Nice OS Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46