Re: MAX_ALLOWED Read/Write Objects

From: Sue Hoegemeier (Sue_H_at_nomail.please)
Date: 09/17/03 

Date: Wed, 17 Sep 2003 07:46:55 -0600

Check the following:
Event 560 Failures Appears When File and Object Auditing Is
Enabled
http://support.microsoft.com/?id=245630

-Sue

On Wed, 17 Sep 2003 05:41:15 -0700, "Bob"
<bp_styx@hotmail.com> wrote:

>I am constantly getting Security Audit Failures:
>Object Open:
> Object Server: Security
> Object Type: Desktop
> Object Name: \Winlogon
> New Handle ID: -
> Operation ID: {0,22938574}
> Process ID: 2896
> Primary User Name: xxxxxx
> Primary Domain: xxxxxxx
> Primary Logon ID: (0x0,0x152D08A)
> Client User Name: -
> Client Domain: -
> Client Logon ID: -
> Accesses MAX_ALLOWED
> Read Objects
> Write objects
>
> Privileges -
>on a number of systems. I can't seem to find any info.
>Anybody have any clues?