Excessive logoff events (ID 4634) from Guest account

  • Thread starter questioning_user
  • Start date
Q

questioning_user

Don't ask me why, but I was looking in the event viewer and noticed at there were highly frequent logoff events coming from the Guest account, like once ever second. There are no associated logons, it's all logoffs, all originating from the guest account.


I have not tried enabling the guest account. The only thing that I thought might use the guest account is O'Print, which is a printer server software that I use to print from apple devices on the network, but stopping it didn't stop this phenomenon.


I haven't noticed any significant performance issues, but this seems really strange.


Should I be concerned? Is there a way to track down what is causing it?


Thanks!


f9b8fbe7-ed58-4587-936b-3a680a5ada8a?upload=true.jpg


Properties--all the same except Logon ID:


An account was logged off.


Subject:

Security ID: ComputerName\Guest

Account Name: Guest

Account Domain: ComputerName

Logon ID: 0x9378E5A



Logon Type: 3



This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.

Continue reading...
 
Back
Top Bottom