Samba client tries to anonymously break into a resource.?

Question

Windows Server

There are two servers, both on win server 2012. One server is an RDP terminal, the second is a file cleaner. There is a ball, there is a folder in the ball. From the folder everyone sometimes kicks the balls at the root. Since Windows is not very informative in logs (in fact, I just can't stand it and use it because I have to), I need your help in finding a bug. Both servers are virtual. in the same virtual network. I've already broken my head. What is missing from this rubbish to work normally? I've been looking for a WEEK what could be the trouble. The most annoying thing is that I can’t simply restart the file washer, it’s difficult to stop all the junk that is tied to it.
The only clue, in the logs, someone is breaking for the anonymous. Why, I don't know. Everyone sits for their users. The servers are not in a domain, just on two servers there are two identical users with the same username and password.