Posted: Thu Jul 16, 2009 4:19 pm Post subject: Login entry in event viewer
Hi
When i saw the security under event viewer i found that i have logged into this compter which is Domain controller also.
The details are as follows:-
1.Event ID 538 , Category Logon /Logoff & LogOn Type = 3
2.Event ID 576 , Category Logon /Logoff
3.Event ID 576 , Category Kerberos
But fact is that i have not logged into this computer.
Joined: 09 Jan 2006 Posts: 4 Location: Cremona (Italy)
Posted: Thu Jul 16, 2009 5:02 pm Post subject:
hi,
if you don't login into that computer and it is client in a network try to view if the server see something in your log.
If the computer is not in a network try to view if an IPS view something.
If you are not, someone is, or the server that try to ping or control the client or some one else . I think
hi,
if you don't login into that computer and it is client in a network try to view if the server see something in your log.
If the computer is not in a network try to view if an IPS view something.
If you are not, someone is, or the server that try to ping or control the client or some one else . I think
Do you think that if i am doing logon /logoff in clients(X)then it will register this information in security of event viewer of domain controller(Y).
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum