Event Log Question Still Unanswered - Mutant?

From: dpilot@adelphia.net
Date: 05/01/02


Date: 1 May 2002 16:28:22 -0000
From: <dpilot@adelphia.net>
To: security-basics@securityfocus.com


('binary' encoding is not supported, stored as-is)

Hello, I was told to go to Security Event Descriptions
(Q174074)article but this is vague and offers no answers to
my original question. I need to know what the following
means:

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 5/1/2002
Time: 12:28:34 PM
User: SHAEL\administrator
Computer: SRV2
Description:
Object Open:
         Object Server: Security
         Object Type: Mutant
         Object Name: \BaseNamedObjects\RasPbFile
         New Handle ID: -
         Operation ID: {0,1659972}
         Process ID: 1500
         Primary User Name: administrator
         Primary Domain: SHAEL
         Primary Logon ID: (0x0,0x125551)
         Client User Name: -
         Client Domain: -
         Client Logon ID: -
         Accesses DELETE
                        READ_CONTROL
                        WRITE_DAC
                        WRITE_OWNER
                        SYNCHRONIZE
                        Query mutant state
                        
         Privileges -
 
Thanks for any help.

dp



Relevant Pages