I am curious as to what exactly this event means. It seems every server I
log into that has experienced unexpected shutdowns for one reason or another
there is a good chance the following error is logged:
=================================
Source: LsaSrv
Event ID: 6033
An anonymous session connected from DESTRUCTOR has attempted to open an LSA
policy handle on this machine. The attempt was rejected with
STATUS_ACCESS_DENIED to prevent leaking security sensitive information to
the anonymous caller.
The application that made this attempt needs to be fixed. Please contact
the application vendor. As a temporary workaround, this security measure can
be disabled by setting the
\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contr ol\Lsa\TurnOffAnonymousBlock
DWORD value to 1.
This message will be logged at most once a day.
=================================
Can anyone please explain what exactly it is and if I should be concerned.
Thank You,
-Brock