000,000s of logon/logoff events

000,000s of logon/logoff events
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
000,000s of logon/logoff events muaddib32 08-09-2005
Posted by =?Utf-8?B?bXVhZGRpYjMy?= on August 9, 2005, 7:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi all,

Our SBS 2003 Standard server has in the last week being running very slowly.
Looking at the security logs I have noticed that every user on the network
is being logged on and off (events 538, 540, both type 3) many times every
minute (every five to ten seconds). I am assuming this is not supposed to
happen but since this is all new to me, perhaps it is.

If this is incorrect behaviour could someone please suggest how I might
rectify this

Cheers,
Ben

Posted by S. Pidgorny on August 10, 2005, 6:15 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Only the users curently logged on from the workstations not. If former I'd
suspect a software package running on the client - start analysing running
processes and if the behaviour is observed for the users logged to
workstations that have something in common.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

> Hi all,
>
> Our SBS 2003 Standard server has in the last week being running very
slowly.
> Looking at the security logs I have noticed that every user on the
network
> is being logged on and off (events 538, 540, both type 3) many times every
> minute (every five to ten seconds). I am assuming this is not supposed to
> happen but since this is all new to me, perhaps it is.
>
> If this is incorrect behaviour could someone please suggest how I might
> rectify this
>
> Cheers,
> Ben



Posted by Steven L Umbach on August 10, 2005, 8:18 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
That certainly is not normal. Be sure to do a full malware scan on your
computer with the latest virus definitions and use the support tool netdiag
to see if there are any reported problems for networking/domain
configuration. Also try booting into Safe Mode to see if the problem
persists. If it does not you have an application or process causing the
problem that is not loaded in Safe Mode. --- Steve


> Hi all,
>
> Our SBS 2003 Standard server has in the last week being running very
> slowly.
> Looking at the security logs I have noticed that every user on the network
> is being logged on and off (events 538, 540, both type 3) many times every
> minute (every five to ten seconds). I am assuming this is not supposed to
> happen but since this is all new to me, perhaps it is.
>
> If this is incorrect behaviour could someone please suggest how I might
> rectify this
>
> Cheers,
> Ben



Similar ThreadsPosted
events 529;539;644 May 3, 2006, 11:28 am
No events in XP Security log August 22, 2005, 10:45 am
Re: No events in XP Security log August 22, 2005, 11:35 am
IIS Metabase Events May 17, 2007, 9:16 am
Top security events to monitor August 2, 2007, 5:04 pm
Windows login packets / events March 10, 2006, 2:26 am

The site map in XML format XML site map

Contact Us | Privacy Policy