Re: Event ID 560
From: CETroutman (skorpion(remove)_at_suespammers.org)
Date: 12/08/03
- Next message: Jack: "Logons and Logoffs"
- Previous message: GeebMan: "Event ID 560"
- In reply to: GeebMan: "Event ID 560"
- Next in thread: GeebMan: "Re: Event ID 560"
- Reply: GeebMan: "Re: Event ID 560"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 8 Dec 2003 11:52:43 -0600
560 - Success Audit - Object open (and "whodunnit" info)
Apparently, you are logging successful "file and object opens".
Check the following:
http://www.eventid.net/display.asp?eventid=560&source=security
CET
"GeebMan" <anonymous@discussions.microsoft.com> wrote in message
news:092e01c3bdac$1f33d120$a501280a@phx.gbl...
> I have an XP workstation that is getting this recurring
> event in the security log. It gets it about twice every
> second and is filling up the log. This just started
> occuring a few days ago and it is the only workstation
> that is registering this error. All other WS in the
> domain are fine. Any ideas...
>
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Object Access
> Event ID: 560
> Date: 12/8/2003
> Time: 9:58:41 AM
> User: XXXX\XXXXXXXXXX
> Computer: XXX_XX
> Description:
> Object Open:
> Object Server: Security
> Object Type: File
> Object Name: \Device\NetBT_Tcpip_{E0F71A16-
> D997-4C0B-A60C-8488C7C6DFE9}
> Handle ID: -
> Operation ID: {0,1434186}
> Process ID: 700
> Image File Name: C:\WINDOWS\EXPLORER.EXE
> Primary User Name: XXXXXXX
> Primary Domain: XXXX
> Primary Logon ID: (0x0,0x57A54)
> Client User Name: -
> Client Domain: -
> Client Logon ID: -
> Accesses: SYNCHRONIZE
> ReadData (or ListDirectory)
> WriteData (or AddFile)
>
> Privileges: -
> Restricted Sid Count: 0
>
>
- Next message: Jack: "Logons and Logoffs"
- Previous message: GeebMan: "Event ID 560"
- In reply to: GeebMan: "Event ID 560"
- Next in thread: GeebMan: "Re: Event ID 560"
- Reply: GeebMan: "Re: Event ID 560"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
