Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Event Viewer Issue (log on codes and workstation name query)

24 May 2016   #1
solquiff

windows 7
 
 
Event Viewer Issue (log on codes and workstation name query)

Hi

I am using a laptop for home use. I am not connected to a server or anything, just the home wifi.

Today I was looking in the event viewer and I saw quite a lot of log ons with numbers, 2,3,5 or 7. Are these all normal enough? I was using the computer at the time so I doubt someone was logging in 'remotely' while I was on it. Is it normal on start up, and log in (using password) etc to see for example log on 2, then a few seconds later log on 3, 5 or 7(when I unlock the screen after the computer has been idle)?

Also, something more worrying is how my girlfriend's name appears at times in the Workstation name.
We both have our own laptops with just 1 profile, on my laptop under my name and on hers under her name.

However, her workstation is showing on mine which I do not understand. When I start up my computer there is just one user profile (mine) and I put in my password. Even when she uses my computer she is still connecting as me so I don't understand how her name would appear in workstation name. Another thing is that a lot of the times I have noticed this are times when I would have been working on my computer and she would be at work, so it is very confusing. Should I be worried about this?

Malware bytes has shown the usual malware stuff PUP.OPTIONAL.CONDUIT etc so I don't think this is the problem: Here is an example of one of the logs. I have removed her name and my IP:

An account was successfully logged on.

Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 3

New Logon:
Security ID: ANONYMOUS LOGON
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0xe56308
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x0
Process Name: -

Network Information:
Workstation Name: ******(GIRLFRIENDS NAME)
Source Network Address: ************
Source Port: 49744

Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): NTLM V1
Key Length: 128

Thank you for your time!


My System SpecsSystem Spec
.
26 May 2016   #2
solquiff

windows 7
 
 

No one?
My System SpecsSystem Spec
01 Jun 2016   #3
UsernameIssues

W7 Pro SP1 64bit
 
 

My guess is that those entries are the result of stuff that you are sharing (by default) on your Home network.

The first time that you connected to your wireless network, you might have seen a prompt like this:



If you selected Home network, from that screen, then I seem to recall that the next screen offers to share your files with other computers on your network. If you opted to do that, then your girlfriend's computer might be automatically connecting to your shared files.
My System SpecsSystem Spec
.

Reply

 Event Viewer Issue (log on codes and workstation name query)




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
How to query Event viewer *archives*?
Hello @all! We are tracking some user activities on our Win 7 machine and the security logs are quite big. Every 20MB the Event Viewer is creating a new archive and stores it, this happens several times a day. My problem now is how to browse those archives? As it seems, when accessing the...
General Discussion
Event ID 10 Event Filter Query Functionality CAUSING BLUE SCREEN
i have been having this error for a couple days now and it also seems to be associated with another crash im getting from a game i play also. first one is a memory dump blue screen issue and the other is just the game crashing. Log Name: Application Source: Microsoft-Windows-WMI...
General Discussion
After BSOD Event Viewer Logs Event ID 3012 and 3011 every time I boot
I was running 3DMark06 and got a BSOD code 124. After that every time I boot Event Viewer logs Error Codes ID 3012 and 3011. Attached are screenshots of both. I googled this and found two different threads where someone suggested to rebuild the performance counters. Both responses were...
BSOD Help and Support
Freezing randomly at all times, Event Viewer suggests driver issue...
I know nothing about this stuff so I've been learning as I try to troubleshoot this issue. This is my build in case it matters: CPU: AMD Athlon II X4 (645) Mainboard: MSI 870-G45 RAM: 4x2 GB DDR3 GPU: AMD Radeon HD 6900 HDD: Seagate 2 TB PSU: Corsair GS 700W
BSOD Help and Support
While Checking in Event viewer lof of Diagonaists Perf issue
Hi, i have attached the event viewer screenshot. My computer goes full white screen while i am working. when i check the event viewer there are lot of errors at regular interval of time. Kindly check and let me what is went wrong. Thanks, Sharma
Performance & Maintenance
IRC and Event Viewer Logs Indicating Network Issue?
Guys, I'm currently having an issue with my Win7 64 bit Pro computer. Transfers to other computers on my network is slow and sometimes the icon in the taskbar shows that it's disconnecting and reconnecting. I've also noticed that uploads to the internet are either slow or just ...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:07.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App