|
Posted by bboan on October 4, 2005, 3:51 pm
Please log in for more thread options
Is it normal to have this much activity in the Security Log of a DNS
machine with only one workstation attached? This is only the first
three minutes of the log. Just from over the weekend it was too large
to open in Excel.
10/3/2005 8:37:27 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Privilege Use 576 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Privilege Use 576 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Privilege Use 576 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:37:16 AM Security Success Audit Privilege Use 576 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:36:50 AM Security Success Audit Logon/Logoff
538 SERVER\Administrator DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Logon/Logoff
538 SERVER\Administrator DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:36:39 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:36:23 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:36:23 AM Security Success Audit Logon/Logoff
538 SERVER\Administrator DELLSERVER
10/3/2005 8:36:08 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:36:08 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:36:08 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:36:08 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Privilege Use 576 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Privilege Use 576 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:57 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:56 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:35:56 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:35:56 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:40 AM Security Success Audit Logon/Logoff
538 SERVER\Administrator DELLSERVER
10/3/2005 8:35:32 AM Security Success Audit Logon/Logoff 538 NT
AUTHORITY\ANONYMOUS LOGON DELLSERVER
10/3/2005 8:35:32 AM Security Success Audit Logon/Logoff 540 NT
AUTHORITY\ANONYMOUS LOGON DELLSERVER
10/3/2005 8:35:32 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:23 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Directory Service Access
565 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Directory Service Access
565 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Logon/Logoff
538 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Logon/Logoff
538 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Logon/Logoff
540 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Privilege Use
576 SERVER\Administrator DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 672 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:09 AM Security Success Audit Account Logon 672 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Logon/Logoff
538 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:07 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:06 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:06 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:06 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:06 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Directory Service Access
565 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Directory Service Access
565 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Logon/Logoff
540 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Privilege Use
576 WRKSTN\DDSS6971$ DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Account Logon 673 NT
AUTHORITY\SYSTEM DELLSERVER
10/3/2005 8:35:03 AM Security Success Audit Account Logon 672 NT
AUTHORITY\SYSTEM DELLSERVER
|