What is the login type? Should usually.read 3 which is login over the network which is normal but if you see login type 2 that u might want to investigate since it's login locally and that would be abnormal imho.
Ed On Feb 24, 2016 1:56 PM, "Kennedy, Jim" <[email protected]> wrote: > 2008 R2 print server, sharing one printer amongst about 750 people. I am > seeing 20 to 25 logon events a second on this server. That seems excessive, > is that normal behavior for a print server...to re auth the connection that > often? >
