object access failure audits
Although only an annoyance, when users print on my network I get an error
event ID 560 in the Security log. I audit for print success/Failure and
failure to delete print jobs using the 'everyone' group. Can someone shed
some light on this and what I can do to get rid of these events. The users
all are allowed to print to these printers, and I get the usual print event
in the system log.
.
Relevant Pages
- Event ID 560 from printing
... event ID 560 in the Security log. ... I audit for print success/Failure and ... As a second one with printing, I usually get anonymous users in the print ... (microsoft.public.win2000.security) - Event Log - Event ID 560 on printing.
... event ID 560 in the Security log. ... I audit for print success/Failure and ... As a secxond one with printing, I usually get anonymous users in the print ... (microsoft.public.windows.server.general) - Re: Ghost in the Recycle Bin
... Audit account logon events ... Prevent local guests group from accessing application log ... Prevent local guests group from accessing security log ... (microsoft.public.windowsxp.help_and_support) - Re: administrator sign on
... I dont' think Windows audits this by default. ... Event log in the Security log, in the Computer Management MMC. ... also audit success of, say, logon events, and probably also system events, ... (microsoft.public.security) - Re: Audit the administrator account?
... In a Windows NT domain, the security log of the PDC can be configured to ... "Audit these events" and turn on auditing for "User and Group Management"... ... Event Log for the PDC for event ID 628. ... (microsoft.public.win2000.security) |
|