RE: Failure Audit log

From: William Wang[MSFT] (v-rxwang_at_online.microsoft.com)
Date: 05/12/05

  • Next message: Sophie Guo [MSFT]: "RE: SQL2KSP4 sp_addalias and db_accessadmin" 
    Date: Thu, 12 May 2005 06:43:11 GMT

    Based on my experience, this error usually occurs when a user
    (DOMAIN\KNOWN_USER_NAME) makes a connection via a MMC and they do not have
    the permissions to perform this action.

    Can you identify what actions were performing at that time this error was
    logged? In addition, is there any business impact casued by this error? Do
    the domain users have any difficulty doing their job?

    Sincerely,

    William Wang
    Microsoft Online Partner Support

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    >Thread-Topic: Failure Audit log
    >thread-index: AcVWbUHfZOaL7esET9Wrkqq2v6XWfA==
    >X-WBNR-Posting-Host: 128.194.92.153
    >From: "=?Utf-8?B?U1RlY2g=?=" <stech@nospam.nospam>
    >Subject: Failure Audit log
    >Date: Wed, 11 May 2005 14:06:10 -0700
    >Lines: 44
    >Message-ID: <DA088796-FBED-4CCB-B9FC-2A2370CEACF0@microsoft.com>
    >MIME-Version: 1.0
    >Content-Type: text/plain;
    > charset="Utf-8"
    >Content-Transfer-Encoding: 7bit
    >X-Newsreader: Microsoft CDO for Windows 2000
    >Content-Class: urn:content-classes:message
    >Importance: normal
    >Priority: normal
    >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    >Newsgroups: microsoft.public.sqlserver.security
    >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    >Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    >Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.sqlserver.security:4976
    >X-Tomcat-NG: microsoft.public.sqlserver.security
    >
    >
    >We have started seeing a lot of failure audits on our sql server after we
    >gave a couple of domain users access to the SQL DB. The users have
    >permissions to read/write to certain tables in some databases. Any idea
    what
    >is causing this?
    >
    >Event Type: Failure Audit
    >Event Source: Security
    >Event Category: Object Access
    >Event ID: 560
    >Date: 5/5/2005
    >Time: 1:08:00 PM
    >User: <<DOMAIN\KNOWN_USER_NAME>>
    >Computer: <<SERVER_NAME>>
    >Description:
    >Object Open:
    > Object Server: SC Manager
    > Object Type: SC_MANAGER OBJECT
    > Object Name: ServicesActive
    > Handle ID: -
    > Operation ID: {0,<<000000000>>}
    > Process ID: 844
    > Image File Name: C:\WINDOWS\system32\services.exe
    > Primary User Name: <<SERVER_NAME>>$
    > Primary Domain: SAGO
    > Primary Logon ID: (0x0,0x<<000>>)
    > Client User Name: <<KNOWN_USER_NAME>>
    > Client Domain: SAGO
    > Client Logon ID: (0x0,0x<<00000000>>)
    > Accesses: READ_CONTROL
    > Connect to service controller
    > Enumerate services
    > Query service database lock state
    >
    > Privileges: -
    > Restricted Sid Count: 0
    > Access Mask: 0x20015
    >
    >
    >For more information, see Help and Support Center at
    >http://go.microsoft.com/fwlink/events.asp.
    >
    >
    >
    >

  • Next message: Sophie Guo [MSFT]: "RE: SQL2KSP4 sp_addalias and db_accessadmin"

    Relevant Pages

    • ADP, Application Role, and objects
      ... The above link is to an atricle on how to implement SQL Server Application ... After you connect with your ADP, fire a bit of code to set the ... third party tools to view the data on the same database. ... Scenario 1 - If I explicitly grant permissions on that object to the user ...
      (microsoft.public.access.adp.sqlserver)
    • Re: field level security question
      ... Vyas, MVP ... listBox control that gets data from a query of the sql server table. ... > recent change in requirement) I see the option to limit permissions right ... > utility opens except their is just no data. ...
      (microsoft.public.sqlserver.security)
    • RE: SQL 2008 - remote connection to the SSIS 2008 - Access denied
      ... SQL Server configures the appropriate rights during the installation process, ... then add users/groups and assign the appropriate permissions. ... user who created the package apply to the writer role. ... I checked DCOM MsDts component and my user rights for the Remote ...
      (microsoft.public.sqlserver.dts)
    • Re: Deny access to all users (including Administrator and DomainAd
      ... permissions on stored procedure override ... applictaion's user account permissions to the stored procedure which will ... Will try to deny access through the query for SQL Server 2005 and 2000. ... Remove everyone that you don't want rom an Administrator Groups ...
      (microsoft.public.sqlserver.security)
    • Re: SQL 2000 Windows Authentication - Same User Multiple Groups
      ... functionality using our WinForm app and read-only functionality using ... SQL Server permissions are not application-aware. ... App1 contains CRUD functionality using stored procs (EXEC perms on ...
      (microsoft.public.sqlserver.security)
    • Quantcast