Has someone been accessing my computer via RDC or HomeGroup?

[thatoneguy1]

Me and a roommate share an internet connection, he has control of router access and created a homegroup which I joined. Upon searching through event viewer I came to find this:

An account was successfully logged on.

Subject:
Security ID: NULL SID
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 3

New Logon:
Security ID: ANONYMOUS LOGON
Account Name: ANONYMOUS LOGON
Account Domain: NT AUTHORITY
Logon ID: 0xb30224
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x0
Process Name: -

Network Information:
Workstation Name: JOESCOMP
Source Network Address: 192.168.1.(xxx)
Source Port: 65509

Detailed Authentication Information:
Logon Process: NtLmSsp
Authentication Package: NTLM
Transited Services: -
Package Name (NTLM only): NTLM V1
Key Length: 128

Is this infact someone gaining access to my computer via HomeGroup or WorkGroup?
If there is any additional info I can give let me know, or if there is something else I should look for.

 

[DustSailor]

Guy, welcome to Sevenforums.

Does your roommate have a password for his router set up? Did he let anyone else use the router or homegroup? Why do you use homegroup with your roommate (this one just cause I'm curious)?

Did you set "advanced sharing settings" to require a password (can find this by searching in start menu)? - That would be for all your other shared files, and doesn't have anything to do with homegroup. But it is an important security precaution if you don't want "anonymous" connecting.

*Edit - On second thought, I'm pretty sure this info is just your own computer doing its thing o.0
lol took me a second glance. That would be the reason it is anonymous, doesn't have an id, no SID, etc.

 

[Golden]

Hi,

What did you choose to share with the HomeGroup?

Regards,
Golden