Anonymous users successfully logging into my pc

Hello,

I have Windows XP Pro. Something in the security log makes me wonder if
people are logging into my computer. I logged in as Administrator and
opened
Computer Management->System Tools->Event Viewer->Security.

In the right pane, a lot of "Success Audit" items have an ANONYMOUS
user. When I open the details for such an item I get this sort of
thing:

Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x1B4149)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: TUDECZKI
Logon GUID: {00000000-0000-0000-0000-000000000000}


Successful Network Logon:
User Name:
Domain:
Logon ID: (0x0,0x1A2110)
Logon Type: 3
Logon Process: NtLmSsp
Authentication Package: NTLM
Workstation Name: KRYSTYNA
Logon GUID: {00000000-0000-0000-0000-000000000000}


What caught my eye is the Workstation Name. These are real names and I
do not know any of them. Is it possible that my Internet Service
Provider somehow allows other clients to see my computer? I do have a
Firewall up and working.

My PC has an Administrator account but I use it for that purpose only.
I never use it to access the internet. My guest account and all other
accounts are turned off except for one which I use for all my other
needs. It is a power user account.

I'm not a security expert but I once went through the security options
in the administration consoles and restricted access as much as
possible. Any ideas what's going on?

I am having the same problem on my home computer. Someone is logging in
remotely and solwing down the system. Nothing malicious so far. I set up
passwords for all user accounts and restricted access as much as possible. I
still have to clear junk off the computer once a week to speed it up.

What else can be done to restrict access? I wanted to set the user accounts
to log off automatically after x minutes of inactivity. I am not sure how to
do that.

I would be very interested in any help here. Like I said, nothing malicious
so far but... I still don't want some one hijacking my computer.

Par

"zorro" wrote:

> Hello,
>
> I have Windows XP Pro. Something in the security log makes me wonder if
> people are logging into my computer. I logged in as Administrator and
> opened
> Computer Management->System Tools->Event Viewer->Security.
>
> In the right pane, a lot of "Success Audit" items have an ANONYMOUS
> user. When I open the details for such an item I get this sort of
> thing:
>
> Successful Network Logon:
> User Name:
> Domain:
> Logon ID: (0x0,0x1B4149)
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package: NTLM
> Workstation Name: TUDECZKI
> Logon GUID: {00000000-0000-0000-0000-000000000000}
>
>
> Successful Network Logon:
> User Name:
> Domain:
> Logon ID: (0x0,0x1A2110)
> Logon Type: 3
> Logon Process: NtLmSsp
> Authentication Package: NTLM
> Workstation Name: KRYSTYNA
> Logon GUID: {00000000-0000-0000-0000-000000000000}
>
>
> What caught my eye is the Workstation Name. These are real names and I
> do not know any of them. Is it possible that my Internet Service
> Provider somehow allows other clients to see my computer? I do have a
> Firewall up and working.
>
> My PC has an Administrator account but I use it for that purpose only.
> I never use it to access the internet. My guest account and all other
> accounts are turned off except for one which I use for all my other
> needs. It is a power user account.
>
> I'm not a security expert but I once went through the security options
> in the administration consoles and restricted access as much as
> possible. Any ideas what's going on?
>
>