Re: Security Audit Failure and Mutant State?

From: Eric Fitzgerald [MS] (ericf@online.microsoft.com)
Date: 06/05/02 

From: "Eric Fitzgerald [MS]" <ericf@online.microsoft.com>
Date: Tue, 4 Jun 2002 16:04:39 -0700

You enabled the security option "Audit the access of global system objects"
in either Local Security Policy or Group Policy. You should not enable this
setting; it's unlikely that you'll ever figure out what those events mean
without a copy of the Windows source code available.

Eric 

--
Eric Fitzgerald
Program Manager, Windows Auditing and Intrusion Detection
Microsoft Corporation
"Doc" <pc-dc-doc@attbi.com> wrote in message
news:3CFA26E6.E003BFE7@attbi.com...
> Okay, does anyone know why I'm suddenly a mutant.
> I've search the KB files at MS, nothing that reads like
> this... and I've down a few google searches with no
> luck.
>
> GREATLY appreciate any insight... this seems to occur
> and hang the system (nobootgui) after  MUP
>
> Win2K SP2 and all hotfixed. Thanks.
>
>
> Object Open:
>   Object Server: Security
>   Object Type: Mutant
>   Object Name: \BaseNamedObjects\RasPbFile
>   New Handle ID: -
>   Operation ID: {0,459265}
>   Process ID: 876
>   Primary User Name: Admin
>   Primary Domain: MAINWKSTA
>   Primary Logon ID: (0x0,0x16600)
>   Client User Name: -
>   Client Domain: -
>   Client Logon ID: -
>   Accesses DELETE
> READ_CONTROL
> WRITE_DAC
> WRITE_OWNER
> SYNCHRONIZE
> Query mutant state
>
>   Privileges -
>
> --
> Rich "Doc" Colley
>
> mailto: pc-dc-doc@attbi.com

Relevant Pages