Re: Event ID 578 and HPBPRO dot exe

From: Alan Morris\(MSFT\) (alanmo_at_online.microsoft.com)
Date: 04/05/04 

Date: Mon, 5 Apr 2004 13:42:54 -0700

HP might be a better place to ask. This binary comes with the Business
inkjet 2300 and the 3000

http://search.hp.com/gwuseng/query.html?submit.x=6&submit.y=4&qt=hpbpro.exe&la=en&col=hpcom+ccen+ccenfor 

-- 
Alan Morris
Windows Printing Team
Search the Microsoft Knowledge Base here:
http://support.microsoft.com/default.aspx?scid=fh;[ln];kbhowto
This posting is provided "AS IS" with no warranties, and confers no rights.
"John Collins" <john.collins@usma.edu> wrote in message
news:e$oHdgzGEHA.4008@TK2MSFTNGP10.phx.gbl...
> Our Windows 2000 print server (in AD as a member server) is filling up the
> security event log with #578's like below. I understand it to be a "take
> ownership" privilege log entry. It's the same user's ID (my bosses
actually)
> and has anywhere from 24 to over 50 identical entries with the exact same
> time.  Each group of identical entries is separated by only seconds, say
30
> or 45 seconds between groups.
>
> The user is not logged into the server but does have four printers defined
> in his printer folder on his desktop.  The entries show up whether he is
> printing or not.  The user is a member of the local administrators group
on
> the server.
>
> While troubleshooting this and looking at the Task Manger I noticed that
> periodically, every minute or so, an Image Name of hpbpro.e x e shows up
> (usually two or three at a time) with the User Name of this user ID and
the
> session number indicates the console.  He is not logged into the console
at
> the times that this happens.  These processes show up and disappear in the
> blink of an eye.  And are quite regular, almost coincidental with the
above
> messages.
>
> Any idea?
>
>
>
> ========= Event Description Below ===============
> Event Type: Success Audit
> Event Source: Security
> Event Category: Privilege Use
> Event ID: 578
> Date:  05-Apr-04
> Time:  12:29:52
> User:  Domain\UserID
> Computer: SERVER
> Description:
> Privileged object operation:
>   Object Server: Security
>   Object Handle: 496
>   Process ID: 3056
>   Primary User Name: UserID
>   Primary Domain: Domain
>   Primary Logon ID: (0x0,0x1E91EEDF)
>   Client User Name: -
>   Client Domain: -
>   Client Logon ID: -
>   Privileges: SeTakeOwnershipPrivilege
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>

Relevant Pages

  • Re: Server 2008 slow printing through spooler
    ... Windows Printing Team ... Search the Microsoft Knowledge Base here: ... disable rendering on the server and offload to the client ... Granted that these two fixes will resolve an issue with a Vista client ...
    (microsoft.public.windows.server.general)
  • Re: Server 2008 slow printing through spooler
    ... disable rendering on the server and offload to the client ... Are the clients using a set of fonts that are not installed on the server? ... Windows Printing Team ... Search the Microsoft Knowledge Base here: ...
    (microsoft.public.windows.server.general)
  • Re: Printing preferences on network printer
    ... What is the driver version on the client and the server? ... Windows Printing Team ... Printers and the prefered settings from the server still doesn't ...
    (microsoft.public.windowsxp.print_fax)
  • Re: Server 2008 slow printing through spooler
    ... I think you will find that installing the fonts that the ... clients are using onto the print server will also resolve this. ... Windows Printing Team ... Granted that these two fixes will resolve an issue with a Vista client ...
    (microsoft.public.windows.server.general)
  • Re: Server 2008 slow printing through spooler
    ... Windows Printing Team ... Search the Microsoft Knowledge Base here: ... this patch on an XP load, that the client may fail/bsod. ... unsuitable RPC caching in Windows Server 2008 and in Windows Vista ...
    (microsoft.public.windows.server.general)
Quantcast