Windows 10: how do I stop NT Authority Logon Special Logon users from creating a workgroup organization...

Discus and support how do I stop NT Authority Logon Special Logon users from creating a workgroup organization... in AntiVirus, Firewalls and System Security to solve the problem; Several users are accessing my computer using Windows Network Security NT Authority LOGON SPECIAL LOGON privileges to change group policy allowing the... Discussion in 'AntiVirus, Firewalls and System Security' started by DEBRA ELDER-LAMBETH1, Nov 23, 2020.

  1. how do I stop NT Authority Logon Special Logon users from creating a workgroup organization...


    Several users are accessing my computer using Windows Network Security NT Authority LOGON SPECIAL LOGON privileges to change group policy allowing the creation of a workgroup that gives access to multiple users creating workstations allowing users to access my Microsoft account and resources to create a false financial account to access my brokerage account

    :)
     
    DEBRA ELDER-LAMBETH1, Nov 23, 2020
    #1
  2. Mithin_EJ Win User

    Login failed for user NT AUTHORITY\ANONYMOUS LOGON

    Hi,



    Thank you for the reply.



    I request you to post your query in
    TechNet
    , where we have the engineer with the expertise on NT AUTHORITY\ANONYMOUS LOGON and can provide relevant solution to your query.





    Hope it helps,



    Regards,
     
    Mithin_EJ, Nov 23, 2020
    #2
  3. wolf2009 Win User
    Mapped network drives do not connect at logon in vista with automatic logon enabled

    I have vista x64 . I have some mapped network drives . They get connected when i enter the password at logon screen. Now i enabled automatic logon in vista and they do not connect anymore . I have to double click on them and enter the password manually .

    Windows displays the message "Could not connect to all drives" at logon .

    They used to connect automatically in xo with automatic logon enabled.

    My logon password is the same as the administrator password with which i can connect to these drives .
     
    wolf2009, Nov 23, 2020
    #3
  4. Erfngel1 Win User

    how do I stop NT Authority Logon Special Logon users from creating a workgroup organization...

    Event 4672, Special Logon

    Why would this event be shown in my logs. No one else has had access or been given access to my pc.

    I will attach the event records:

    Log Name: Security

    Source: Microsoft-Windows-Security-Auditing

    Date: 12/3/2019 3:55:00 AM

    Event ID: 4672

    Task Category: Special Logon

    Level: Information

    Keywords: Audit Success

    User: N/A

    Computer:

    Description:

    Special privileges assigned to new logon.

    Subject:

    Security ID: SYSTEM

    Account Name: SYSTEM

    Account Domain: NT AUTHORITY

    Logon ID: 0x3E7

    Privileges: SeAssignPrimaryTokenPrivilege

    SeTcbPrivilege

    SeSecurityPrivilege

    SeTakeOwnershipPrivilege

    SeLoadDriverPrivilege

    SeBackupPrivilege

    SeRestorePrivilege

    SeDebugPrivilege

    SeAuditPrivilege

    SeSystemEnvironmentPrivilege

    SeImpersonatePrivilege

    SeDelegateSessionUserImpersonatePrivilege

    Event Xml:

    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

    <System>

    <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />

    <EventID>4672</EventID>

    <Version>0</Version>

    <Level>0</Level>

    <Task>12548</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8020000000000000</Keywords>

    <TimeCreated SystemTime="2019-12-03T11:55:00.280502200Z" />

    <EventRecordID>8680324</EventRecordID>

    <Correlation ActivityID="{1b47e864-a4f5-0005-76e8-471bf5a4d501}" />

    <Execution ProcessID="884" ThreadID="23764" />

    <Channel>Security</Channel>

    <Computer></Computer>

    <Security />

    </System>

    <EventData>

    <Data Name="SubjectUserSid">S-1-5-18</Data>

    <Data Name="SubjectUserName">SYSTEM</Data>

    <Data Name="SubjectDomainName">NT AUTHORITY</Data>

    <Data Name="SubjectLogonId">0x3e7</Data>

    <Data Name="PrivilegeList">SeAssignPrimaryTokenPrivilege

    SeTcbPrivilege

    SeSecurityPrivilege

    SeTakeOwnershipPrivilege

    SeLoadDriverPrivilege

    SeBackupPrivilege

    SeRestorePrivilege

    SeDebugPrivilege

    SeAuditPrivilege

    SeSystemEnvironmentPrivilege

    SeImpersonatePrivilege

    SeDelegateSessionUserImpersonatePrivilege</Data>

    </EventData>

    </Event>
     
    Erfngel1, Nov 23, 2020
    #4
Thema:

how do I stop NT Authority Logon Special Logon users from creating a workgroup organization...

Loading...
  1. how do I stop NT Authority Logon Special Logon users from creating a workgroup organization... - Similar Threads - stop Authority Logon

  2. Random Logon / logoff / Special Logon Events on my Computer

    in Windows 10 Software and Apps
    Random Logon / logoff / Special Logon Events on my Computer: Hello Guys!Im a bit scared tbh, I dont what is going on here, but it started a few days ago i guess.How i got aware of it:I use to game a bit on my PC, and then i started taking notes because i get tabbed out of games when i play in Fullscreen which is very annoying..So i...
  3. Random Logon / logoff / Special Logon Events on my Computer

    in AntiVirus, Firewalls and System Security
    Random Logon / logoff / Special Logon Events on my Computer: Hello Guys!Im a bit scared tbh, I dont what is going on here, but it started a few days ago i guess.How i got aware of it:I use to game a bit on my PC, and then i started taking notes because i get tabbed out of games when i play in Fullscreen which is very annoying..So i...
  4. Random Logon / logoff / Special Logon Events on my Computer

    in Windows 10 Gaming
    Random Logon / logoff / Special Logon Events on my Computer: Hello Guys!Im a bit scared tbh, I dont what is going on here, but it started a few days ago i guess.How i got aware of it:I use to game a bit on my PC, and then i started taking notes because i get tabbed out of games when i play in Fullscreen which is very annoying..So i...
  5. Security Auditing ID: 4624/4672 Special Logon and Logon

    in Windows 10 Gaming
    Security Auditing ID: 4624/4672 Special Logon and Logon: Hello, Im constantly getting this audit success every 5-10 minutes. I need help on what this is, and how can I fix it, because it freezes my computer like hardlock and goes back to normal. Here is both events Views. First is Special Logon and Second is LogonSPECIAL...
  6. Security Auditing ID: 4624/4672 Special Logon and Logon

    in Windows 10 Software and Apps
    Security Auditing ID: 4624/4672 Special Logon and Logon: Hello, Im constantly getting this audit success every 5-10 minutes. I need help on what this is, and how can I fix it, because it freezes my computer like hardlock and goes back to normal. Here is both events Views. First is Special Logon and Second is LogonSPECIAL...
  7. Special Logon

    in Windows 10 Ask Insider
    Special Logon: I think someone is snooping my computer. In the security event log, there is a 'special Logon' entry. Is there any way this log entry is generated by the system, or can this only be a person? My security event logger has now been changed so that the log is cleared when i...
  8. Event 4672, Special Logon

    in AntiVirus, Firewalls and System Security
    Event 4672, Special Logon: Why would this event be shown in my logs. No one else has had access or been given access to my pc. I will attach the event records: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 12/3/2019 3:55:00 AM Event ID: 4672...
  9. NT Authority/Special Logon, /special privalages =$User now system owner X5

    in Windows 10 Network and Sharing
    NT Authority/Special Logon, /special privalages =$User now system owner X5: $user x5 using Azure, Visual Studioi Cc+ PYTHON project INTERRFACED TDAMERITRADE MY BROKERAGE ACCOUNT!!!!! Storing projects live code using system 32 and system as project repository for GITHUB aNd happy hacker team. total disregard for the operating system intrfer in...
  10. Logon script runs at startup and not at user logon

    in Windows 10 Support
    Logon script runs at startup and not at user logon: I have 3 PCs, and my logon script in my Group Policy (C:\WINDOWS\System32\GroupPolicy\User\Scripts\Logon) runs as expected at user logon in all 3 PCs. However, in my fourth PC, the logon script runs at startup prior to a user logging onto this PC. I cannot seem to figure out...