On a Windows Server 2008 SP2 system I see in the logs the SYSTEM account log on (and assume privileges) at least several times a minute even during periods when the server is not being used at all (remotely or otherwise). The system is doing AD, DNS, DHCP, NTP, and DFS (I know it's normally bad to have this many roles in one but there are so few users separate machines make no sense here). I understand from this thread that such periodic log ons are normal: http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/8bf6a0aa-2069-4bf0-abdd-f7fb84e07aae However, I'd like to know why exactly the system finds it necessary to log onto itself several times a minute or more even when not being used. This seems like inefficient use of resources (including my poor event log) as compared with, say, logging in once and staying logged in. Any insight would be appreciated. Kevin

I would have ask here. http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threads Thanks

I would have ask here. http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threads Thanks