MS Exchange2K security failure event 565
From: Robin Nicholson (rnicholson@mdtglobal.com)Date: 10/27/01
- Previous message: Brian Lucas: "RE: Can't log off administrator account"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Message-ID: <3BDAC2BC.C1462EED@mdtglobal.com> Date: Sat, 27 Oct 2001 07:20:44 -0700 From: Robin Nicholson <rnicholson@mdtglobal.com> To: "Focus-Ms@Securityfocus. Com (E-mail)" <focus-ms@securityfocus.com> Subject: MS Exchange2K security failure event 565
This is a new failure event for me that has shown up on an MS Exchange
2000 server.
I couldn't find adequate info at the microsoft site to explain what's
going on.
The error showed up after a denial of service error that required
rerunning Exchange setup with the /domainprep option.
The 2 usernames I get the error with have administrative control over a
specific organizational unit.
Has anyone seen this before? Can someone guide me in researching the
meaning of this event?
Robin Nicholson
------------------------------
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 565
Date: 10/25/2001
Time: 8:39:42 AM
User: DOMAINNAME\USERNAME
Computer: COMPUTERNAME
Description:
Object Open:
Object Server: Microsoft Exchange
Object Type: Microsoft Exchange Logon
Object Name: /o=Magnetic Data/ou=First Administrative
Group/cn=Recipients/cn=USERNAME
New Handle ID: -
Operation ID: {0,7604779}
Process ID: 2264
Primary User Name: COMPUTERNAME$
Primary Domain: DOMAINNAME
Primary Logon ID: (0x0,0x3E7)
Client User Name: USERNAME
Client Domain: USERNAME
Client Logon ID: (0x0,0x730023)
Accesses Unknown specific access (bit 8)
Privileges -
Properties:
Unknown specific access (bit 1)
Unknown specific access (bit 4)
Send As
- application/x-pkcs7-signature attachment: S/MIME Cryptographic Signature
- Previous message: Brian Lucas: "RE: Can't log off administrator account"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
