Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Event Viewer Security Log Issue


  • Please log in to reply
3 replies to this topic

#1 TripodBob

TripodBob

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Williamsburg, Virginia
  • Local time:11:23 AM

Posted 16 July 2016 - 11:20 AM

The following 3 entries are repeated several times every minute in my security log whenever my computer is sitting idle.  I have a home network consisting of my computer (Rob) and my wife's computer (Marilyn).  Both systems are XP Home.

 

Event Type:    Success Audit
Event Source:    Security
Event Category:    Logon/Logoff
Event ID:    538
Date:        7/16/2016
Time:        11:07:11 AM
User:        ROB\Guest
Computer:    ROB
Description:
User Logoff:
     User Name:    Guest
     Domain:        ROB
     Logon ID:        (0x0,0x1B32FF9)
     Logon Type:    3


Event Type:    Success Audit
Event Source:    Security
Event Category:    Account Logon
Event ID:    680
Date:        7/16/2016
Time:        11:07:12 AM
User:        NT AUTHORITY\SYSTEM
Computer:    ROB
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 Logon account:  Guest
 Source Workstation: MARILYN
 Error Code: 0x0



Event Type:    Success Audit
Event Source:    Security
Event Category:    Privilege Use
Event ID:    576
Date:        7/16/2016
Time:        11:07:12 AM
User:        ROB\Guest
Computer:    ROB
Description:
Special privileges assigned to new logon:
     User Name:    
     Domain:        
     Logon ID:        (0x0,0x1B343A0)
     Privileges:        SeChangeNotifyPrivilege

These 3 events repeat 4 times every minute.
Guest accounts are OFF in my accounts Window.

 

Any idea what's going on?

 

 



BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 55,893 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:23 AM

Posted 16 July 2016 - 04:25 PM

These are routine entries, should have been made from the first day that Windows was installed.

 

More Info On Types Of Event Viewer Entries

 

The only types of Event Viewer data which should/may cause user concern...would be those items logged as errors.  Some errors call for user intervention, some do not.

 

Louis



#3 TripodBob

TripodBob
  • Topic Starter

  • Members
  • 34 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Williamsburg, Virginia
  • Local time:11:23 AM

Posted 17 July 2016 - 10:08 AM

Louis

 

Thanks for the speedy reply.

 

I periodically check the system and application logs in EventViewer but never paid much attention to the security log.  No cause for alarm then.



#4 hamluis

hamluis

    Moderator


  • Moderator
  • 55,893 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:10:23 AM

Posted 17 July 2016 - 11:34 AM

I think of the System logs as being the most important, with the Application logs indicative of a singular problem with a specific software item.  The Security logs...I consider them Admin Created By Windows For Windows :).

 

Louis






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users