Unnecessary Success Audits appear in Security Log
From: Andrew (apomphre@sewl.com.au)
Date: 04/14/03
- Next message: Dmitry Kulshitsky: "passwords"
- Previous message: Steven L Umbach: "Re: Audit Object Access"
- Next in thread: S. Pidgorny [MVP]: "Re: Unnecessary Success Audits appear in Security Log"
- Reply: S. Pidgorny [MVP]: "Re: Unnecessary Success Audits appear in Security Log"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: apomphre@sewl.com.au (Andrew) Date: 13 Apr 2003 21:57:58 -0700
How do I stop this successfull event from flooding my eventlog:
Its happening every second!
_________________________________________________
Source Security category Object Access
Type Success
User NT Authority\SYSTEM
Computer: MYSERVER
Object Open:
Object Server: Security
Object Type: Key
Object Name: \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\cdrom
New Handle ID: 380
Operation ID: {0,31513334}
Process ID: 2028
Primary User Name: MYSERVER$
Primary Domain: MYDOMAIN
Primary Logon ID: (0x0,0x3E7)
Client User Name: -
Client Domain: -
Client Logon ID: -
Accesses DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
Query key value
Set key value
Create sub-key
Enumerate sub-keys
Notify about changes to keys
Create Link
Privileges -
_________________________________________________________________
I noticed the CD Was shared, so I unshared it - still it logs this
message every second.
TIA,
Andrew
- Next message: Dmitry Kulshitsky: "passwords"
- Previous message: Steven L Umbach: "Re: Audit Object Access"
- Next in thread: S. Pidgorny [MVP]: "Re: Unnecessary Success Audits appear in Security Log"
- Reply: S. Pidgorny [MVP]: "Re: Unnecessary Success Audits appear in Security Log"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]