Event ID 560

From: viciousdog (viciousdog@zdnetonebox.com)
Date: 01/02/02 

From: "viciousdog" <viciousdog@zdnetonebox.com>
Date: Wed, 2 Jan 2002 07:52:20 -0500

 I keep getting Security Log entries for failed object access attempts by
NTAUTHORITY\ANONYMOUS for Event ID 560 and this description:

Object Open:
     Object Server: Security Account Manager
     Object Type: SAM_DOMAIN
     Object Name: <mydomain>
     New Handle ID: -
     Operation ID: {0,7260117} this ID varies from entry to entry
     Process ID: 2161210400
     Primary User Name: SYSTEM
     Primary Domain: NT AUTHORITY
     Primary Logon ID: (0x0,0x3E7)
     Client User Name:
     Client Domain:
     Client Logon ID: (0x0,0x295B)
     Accesses CreateGlobalGroup
          LookupIDs

     Privileges -

There doesn't appear to be any pattern to the times the entries occur.

Any ideas on what could be causing it?

Quantcast