Hello:
I enable the audit feature on NT 4.0 server in hoping to see remote users logon/logoff at what certain time during the day. I set audit logon and logoff with sucess and failure. A day after, I went to to check the security log from Event view. All I saw the log showed User: NT Authority\Anonymous with the time user logon and logoff and whether success or failure. I don't know why the log doesn't show the correct user who logs on. Does anybody know why? please help
Thanks
I enable the audit feature on NT 4.0 server in hoping to see remote users logon/logoff at what certain time during the day. I set audit logon and logoff with sucess and failure. A day after, I went to to check the security log from Event view. All I saw the log showed User: NT Authority\Anonymous with the time user logon and logoff and whether success or failure. I don't know why the log doesn't show the correct user who logs on. Does anybody know why? please help
Thanks
