Re: Security Event ID 643

From: Eric Fitzgerald [MSFT] (ericf_at_online.microsoft.com)
Date: 09/17/03 

Date: Tue, 16 Sep 2003 16:30:41 -0700

It's not a problem, it's by design, we're improving the design ;-) 

-- 
Eric Fitzgerald
Program Manager, Windows Auditing
Microsoft Corporation
The above message is provided "AS-IS" with no warranties, and confers no
rights.
"Steven L Umbach" <n9rou@nsattbi.com> wrote in message
news:TO58b.36682$mp.17231@rwcrnsc51.ops.asp.att.net...
> Domain controllers update their policy every five minutes, which leads me
to
> believe there is a problem with that. Are there any other error Event ID's
> in the application or system log that repeat every five miniutes that may
be
> related? I would run netdiag and dcdiag /v on that domain controller
looking
> for failed tests.  --- Steve
>
> "Dennis Rice (MVP)" <drice@saliantech.com> wrote in message
> news:1d5201c378a1$7401ab00$a601280a@phx.gbl...
> > I have a client getting repeated (every five minutes)
> > Event ID 643 with a Source of "Security" in the Security
> > Log Event viewer.  Here is the event:
> >
> > *******************************************
> >
> > Event Type: Success Audit
> > Event Source: Security
> > Event Category: Account Management
> > Event ID: 643
> > Date: 9/11/2003
> > Time: 3:50:56 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: SERVER
> > Description:
> > Domain Policy Changed: Password Policy  modified
> >   Domain: Domain
> >   Domain ID: Domain\
> >   Caller User Name: SERVER$
> >   Caller Domain: Domain
> >   Caller Logon ID: (0x0,0x3E7)
> >   Privileges: -
> > ******************************************
> >
> > I cannot figure out what is causing this event.  Anyone
> > have ideas on getting rid of this?  I'm uncomfortable not
> > knowing what is causing this.....
> >
> > Thanks!
> >
> > Dennis Rice (MVP)
>
>

Relevant Pages

  • Re: Security Event ID 643
    ... caused by Group Policy. ... Eric Fitzgerald ... >> Caller User Name: SERVER$ ... >>I cannot figure out what is causing this event. ...
    (microsoft.public.win2000.security)
  • Re: Security Event ID 643
    ... Domain controllers update their policy every five minutes, ... > Caller User Name: SERVER$ ... > I cannot figure out what is causing this event. ...
    (microsoft.public.win2000.security)
  • Re: Antares 7mm ortho SALES - Draw your own conclusions
    ... Very enlightening, Pete. ... I think everybody here knows ScopeStuff's return policy. ... as an attempt to make a customer happy. ... This 40 degree design will work well ...
    (sci.astro.amateur)
  • Re: [Patch] export sched_setscheduler() for kernel module use
    ... users who depend on the preemptive nature of this policy. ... optional argument in the sense that the caller should be able to indicate ... If the nice value arg was passed, ... sched_setschedulerlike in my proposed patch. ...
    (Linux-Kernel)
  • Re: What is the proper way to handle errors from function calls?
    ... Make a clean design of you program. ... the fuction was finished well or that it fails. ... specific error code to tell the caller more about the error. ... a clean design will help you to design the error messages and ...
    (comp.lang.c)
Quantcast