...connection using Secondary Log. I recently looked into my security event file and noticed many Logon/Logoff events that were different from mine (the ones clearly marked with my User Name). The entry is from an Anonymous user running the Remote Access Connection manager and the Secondary Logon service.. what does this mean?