Hello, We recently had a user try many combinations to access the ISA Server through terminal server. There were around 100 failure audits, so i am assuming they didnt get in and the fact the server is still up and running. But within these 100 failure audits are a couple of succes audits. When i open these success audits they dont look like the normal success audit. In the description it says: User Logoff: User Name: ANONYMOUS LOGON Domain: NT AUTHORITY Logon ID: (0x0,0x2ED7448) Logon Type: 3 What does this mean? TIA Sachin