Re: Excessive 560 events logged when turning on Object Access Audit

Did you read or try here?:

Event IDs 560 and 562 appear many times in the security event log
http://support.microsoft.com/kb/841001

John

Gilbert wrote:

Help! Due to security regulations, I have to use object auditing. As a result, I get a TON of event 560 failures. Sometimes to the tune of 30 or more per minute. Is there any way to fix this without disabling auditing?

The errors usually appear for RasPbFile, and Crypt32LogoffEvent. What are these events? How can I prevent them from appearing? And does enabling Auditing of Global Objects actually provide useful information at all?

A million Thanks!
Gilbert

.