Re: Event ID 1000 - Access Denied
From: UnixHQ BugTraq Archive (bugtraq@UnixHQ.org)Date: 10/17/01
- Previous message: Mike Shaw: "Crazy ides about .exe isapi mappings"
- In reply to: Turner, Keith: "Event ID 1000 - Access Denied"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 17 Oct 2001 13:45:04 -0500 (CDT) From: UnixHQ BugTraq Archive <bugtraq@UnixHQ.org> To: "Turner, Keith" <TurnerL@tea-emh1.army.mil> Subject: Re: Event ID 1000 - Access Denied Message-ID: <Pine.LNX.4.33.0110171336210.21876-100000@UnixHQ.org>
Hello,
We've ran into a similar problem where I work. I do not know if this is
the case in your situation or not. Check out:
http://support.microsoft.com/support/kb/articles/Q247/4/82.asp
In our case, we had GPO's and removed the users they were mapped to, and
the same Event ID popped up. We then have to, still, remove the left over
SIDs that don't match up to a user name.
It seems that this also happens when you install a program that creates
accounts and rights, yet doesn't remove them.
Hope this may help you,
Jason Stover
Unix System Admin
Parkland Community College
2400 W. Bradley Ave.
Champaign, IL 61821-1899
On Wed, 17 Oct 2001, Turner, Keith wrote:
>
> This may be a coincidence, but I'm thinking not. I'm getting an event
> 1000 in my eventlog from UserEnv- unable to unload registry, detail - access
> denied. System is running Windows 2000 Advanced server, IIS5, SP2, all
> security patches/hotfixes and the software which comes from Compaq for a
> Proliant DL580. The searches I've done in mskb, google, eventid.net, etc
> point to a possible problem with registry keys not being closed correctly.
> The coincidence comes into play in that I have seen this occur during
> multiple installs right after I apply the recommended ACLs in mskb Q187506
> (http://support.microsoft.com/support/kb/articles/q187/5/06.asp). Has
> anyone seen similar behavior or have any idea what I might check?
>
> Thanks,
> Keith
>
- Previous message: Mike Shaw: "Crazy ides about .exe isapi mappings"
- In reply to: Turner, Keith: "Event ID 1000 - Access Denied"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|