SOLVED
Home

User NT AUTHORITY\ANONYMOUS in BUILTIN\Administrators?

%3CLINGO-SUB%20id%3D%22lingo-sub-327327%22%20slang%3D%22en-US%22%3EUser%20NT%20AUTHORITY%5CANONYMOUS%20in%20BUILTIN%5CAdministrators%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327327%22%20slang%3D%22en-US%22%3E%3CP%3ESeeing%20EventID%200%20constantly%20after%20a%20new%20setup%20of%20WAC%20on%20fully%20patched%20Server%202016%20Standard.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETried%20upgrading%20to%26nbsp%3B%3CSPAN%3E1812%26nbsp%3B%3C%2FSPAN%3EBuild%26nbsp%3B%3CSPAN%3E1.1.1812.06001%20but%20still%20seeing%20it%20every%20time%20I%20try%20to%20add%20a%20new%20server.%26nbsp%3B%20Get%20eternal%20spinning%20dots%20and%20no%20progress.%26nbsp%3B%20CPU%20hits%2025%25%20with%20the%20SME.exe%20process%20and%20appears%20hung.%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI%20was%20able%20to%20add%20servers%20initially%20right%20after%20I%20installed%20WAC%2C%20but%20oddly%20enough%20it%20stopped%20on%20its%20own%2C%20and%20the%20problem%20has%20not%20gone%20away%20even%20after%20service%20restart%20and%20server%20reboot.%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3E%3CBR%20%2F%3EAttached%20picture%20of%20current%20permission%20level%20for%20sme.exe%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESeems%20user%20ANONYMOUS%20should%20never%20have%20Administrator%20access%2C%20but%20not%20sure%20where%20else%20to%20look%20here.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-328150%22%20slang%3D%22en-US%22%3ERe%3A%20User%20NT%20AUTHORITY%5CANONYMOUS%20in%20BUILTIN%5CAdministrators%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-328150%22%20slang%3D%22en-US%22%3E%3CP%3EOK%20after%20looking%20over%20the%20problem%20further%2C%20I%20eventually%20realized%20that%20chrome%20had%20stored%20the%20initial%20login%20when%20connecting%20to%20the%20gateway.%26nbsp%3B%20Subsequent%20attempts%20to%20load%20the%20console%20after%20that%20were%20all%20logged%20in%20as%20ANONYMOUS%20somehow.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEventually%20after%20closing%20and%20reopening%20chrome%2C%20it%20prompted%20me%20to%20login%20again%20and%20everything%20started%20working%20normally%20again.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
houlihas
New Contributor

Seeing EventID 0 constantly after a new setup of WAC on fully patched Server 2016 Standard.  

 

Tried upgrading to 1812 Build 1.1.1812.06001 but still seeing it every time I try to add a new server.  Get eternal spinning dots and no progress.  CPU hits 25% with the SME.exe process and appears hung.  

 

I was able to add servers initially right after I installed WAC, but oddly enough it stopped on its own, and the problem has not gone away even after service restart and server reboot.  


Attached picture of current permission level for sme.exe

 

Seems user ANONYMOUS should never have Administrator access, but not sure where else to look here.

1 Reply
Solution

OK after looking over the problem further, I eventually realized that chrome had stored the initial login when connecting to the gateway.  Subsequent attempts to load the console after that were all logged in as ANONYMOUS somehow.  

 

Eventually after closing and reopening chrome, it prompted me to login again and everything started working normally again.  

 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
50 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
32 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
15 Replies
Dev channel update to 80.0.355.1 is live
josh_bodner in Discussions on
67 Replies