I have added a logger for jenkins.security.SecurityListener and some of the the log entries show this:
logged out: anonymous
This is strange because anonymous access is disabled already, Jenkins is connected to Active Directory. Second, there are no entries for "anonymous" user logging-in. It just shows a log out entry.
What's the reason ?