Windows 2003 Domain controller
        Posted  
        
            by user40766
        on Server Fault
        
        See other posts from Server Fault
        
            or by user40766
        
        
        
        Published on 2010-04-16T17:20:11Z
        Indexed on 
            2010/04/16
            17:24 UTC
        
        
        Read the original article
        Hit count: 295
        
I have a win 2K3 domain controller that has sudddenly started logging about 60 events a second. All events are ID 538, 540 and 576
All events pertain to Security Audit of the machine itself logging in successfully. a typical entry is
Event Id 540 Successful Network Logon: User Name: <machinename>$
Any pointers to how I can diagnose this? CPU and memory are normal on the machine.
© Server Fault or respective owner