RE: Event ID

  • From: "sachin vaish" <sachin.vaish@xxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Tue, 3 Jun 2003 16:44:55 -0600

Hello,

We recently had a user try many combinations to access the ISA Server
through terminal server. There were around 100 failure audits, so i am
assuming they didnt get in and the fact the server is still up and
running. But within these 100 failure audits are a couple of succes
audits.

When i open these success audits they dont look like the normal success
audit. In the description it says:
User Logoff:
        User Name:      ANONYMOUS LOGON
        Domain:         NT AUTHORITY
        Logon ID:               (0x0,0x2ED7448)
        Logon Type:     3
What does this mean?

TIA

Sachin


Other related posts:

  • » RE: Event ID