565 Events

From: Peter K. (pmkdatabase@yahoo.ca)
Date: 04/21/03 

From: Peter K. <pmkdatabase@yahoo.ca>
Date: Mon, 21 Apr 2003 09:14:11 +0700

Hi,

Any ideas on the cause/solution of these? I get them every now and
then when logging on to a workstation. The logon is successful, but
these events show up. The user name below (Philip) is the workstation
name, not a human user.

Thanks,

Peter

Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 565
Date: 4/21/2003
Time: 8:24:08 AM
User: JOM\PHILIP$
Computer: PMCI-01
Description:
Object Open:
         Object Server: DS
         Object Type: container
         Object Name: %{cdd69897-5971-448b-8a98-68e1e68bf28b}
         New Handle ID: -
         Operation ID: {0,25815628}
         Process ID: 268
         Primary User Name: PMCI-01$
         Primary Domain: JOM
         Primary Logon ID: (0x0,0x3E7)
         Client User Name: PHILIP$
         Client Domain: JOM
         Client Logon ID: (0x0,0x189EA3F)
         Accesses List Contents
                        
         Privileges -

 Properties:

Relevant Pages

  • Re: Daily Server Report (Critical Errors, Event ID: 537)
    ... Also, Logon type of 3 is a network logon, this is considered a ... Does this issue happen on client workstation or server? ... Does your server and all clients' workstation work well now? ... issue in your Network? ...
    (microsoft.public.windows.server.sbs)
  • Re: Daily Server Report (Critical Errors, Event ID: 537)
    ... Also, Logon type of 3 is a network logon, this is considered a ... Does this issue happen on client workstation or server? ... Does your server and all clients' workstation work well now? ... issue in your Network? ...
    (microsoft.public.windows.server.sbs)
  • Re: Users cannot access remote web workplace without admin access
    ... RWW site logon issue ... When we create the user accounts by using the SBS add users ... workstation through the RWW-RDP connection? ... For the RDP access issue, it could be an expected behavior. ...
    (microsoft.public.windows.server.sbs)
  • Re: How list all current logon NT domain users?
    ... > last logon time, but not give the logoff time. ... required to exist while the user remains logged on to a workstation or TS ... "agent" on every single workstation, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Event ID 539 & 529 in large numbers - from what?
    ... When I get an account locking out without obvious cause, I just go in and delete all the saved passwords. ... Both the username and the workstation name are legitimate user/workstation on the network. ... Logon Failure: ... Caller User Name: - ...
    (microsoft.public.windows.server.sbs)