Successful Network Logon. Logon Type = 3. What is thi? How to block this? RRS feed

  • Question

  • Hi All,

    I keep seeing some error regarding network logon. What is this? How can i block it?

    Block incoming port 88?

    Successful Network Logon:
         User Name:    username$
         Domain:        DOMAIN-NAME
         Logon ID:        (0x0,0x20C83F)
         Logon Type:    3
         Logon Process:    Kerberos
         Authentication Package:    Kerberos
         Workstation Name:    
         Logon GUID:    {9e5ce0f6-c05b-88a5-813c-b246d60da9bf}
         Caller User Name:    -
         Caller Domain:    -
         Caller Logon ID:    -
         Caller Process ID: -
         Transited Services: -
         Source Network Address:    xx.xx.xx.xx (some external IP)
         Source Port:    0


    Monday, November 26, 2012 2:27 AM

All replies

  • Bump.

    Any idea?

    Monday, December 3, 2012 6:46 AM
  • Bump.

    Sorry would love to get some inputs or suggestions...


    Monday, December 10, 2012 5:25 AM
  • Logon Type 3 = Network Logon.

    Kerberos = domain user cred was passed (specifically, the party has a TGT, was granted a TGS to perform its actions on said asset, passes TGS for network logon)

    Tuesday, June 30, 2015 3:55 PM