strange security event logs

From: Jeremy Sun (jeremysun@hssc.edu.hk)
Date: 02/14/03 

From: "Jeremy Sun" <jeremysun@hssc.edu.hk>
Date: Thu, 13 Feb 2003 17:03:57 -0800

The following logs pop up on most of the workstations and
servers' security log since last year (way before I
applied win2k sp2)

Usually the log repeated themselves 20 times per day... A
few months and that is a lot. Anyone has any idea with
them?

(I turned all policy level auditing *ON*)

Thanks
Jeremy

---------------------------------------------------
Security Log
Failure Audit
EventID 560

security
event
\basenamedobjects\crypt32logoffevent

OR

Security Log
Failure Audit
EventID 560

security
mutant
\basenamedobjects\raspbfile

Relevant Pages

  • Re: Hyperlinks dont function after TS lockdown
    ... Sounds like you are looking in the Security Log. ... EventID 865 ... wrote on 25 maj 2007 in ... Using Software Restriction Policies to Protect Against ...
    (microsoft.public.windows.terminal_services)
  • Re: strange security event logs
    ... You probably enabled "audit the access of global system objects" / ... > servers' security log since last year (way before I ... > Failure Audit ... > EventID 560 ...
    (microsoft.public.win2000.security)
  • Re: who deleted a user acct in AD
    ... You can check the EventLog on the DC. ... Look into the Security log: ... Category: Account Management ... Eventid: 630 ...
    (microsoft.public.windows.server.active_directory)
  • Event 598
    ... Security Log. ... Event Type: Failure Audit ... Protection of auditable protected data. ... Protected Data Flags: 0x0 ...
    (microsoft.public.win2000.security)
  • Security Event Log (Event 615)
    ... Everytime I turn on the computer and get to the desktop I ... receive a failure audit in the security log. ... continuous failure could lead to that. ...
    (microsoft.public.security)
Quantcast