Event ID 4624 Expand / Collapse
Author
Message
Posted 2/16/2017 9:56:38 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 2/16/2017 9:50:20 AM
Posts: 1, Visits: 1
Hi everyone,
i have problem with above error. it has been discovered that my workstation HP ZBOOK is loggoing on to other machines on our company network. in the event view of 7 machines it shows my workstation name and ip only and also shows an account was successfully logged on. with source port 14286 logon process : NtLmSssp Logon type : 3 Account Domain NT Authority. our IT Teams is saying i was hacking or illegally loggin these machines which is not true. How can i explain this
Post #7319
Posted 3/17/2017 7:50:12 AM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 173, Visits: 0
This is a network logon that could happen a lot when accessing resources. Whether this was legitimate or not is depending on the hosts that this was found on. You will see this activity on most server types that you interact with.
Post #7332
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 1:05am