Re: Event ID 560

From: CETroutman (skorpion(remove)_at_suespammers.org)
Date: 12/08/03

  • Next message: swo: "perl cgi problem on Windows 2003 Server" 
    Date: Mon, 8 Dec 2003 15:33:51 -0600

    Object Name: \Device\NetBT_Tcpip_{E0F71A16-D997-4C0B-A60C-8488C7C6DFE9}
    is a designation for a Network Transport...

    The suggestion is that you are logging an event each and every time a/the
    user opens a transport on your net or to the Web (TCP/IP).

    Probably not something you wish to keep a record of...

    CET

    "GeebMan" <anonymous@discussions.microsoft.com> wrote in message
    news:00ee01c3bdb7$1ee82120$a401280a@phx.gbl...
    > Do you know a way to decipher this object name?
    >
    > Object Name: \Device\NetBT_Tcpip_{E0F71A16-D997-4C0B-A60C-
    > 8488C7C6DFE9}
    >
    > >-----Original Message-----
    > >560 - Success Audit - Object open (and "whodunnit" info)
    > >
    > >Apparently, you are logging successful "file and object
    > opens".
    > >
    > >Check the following:
    > >http://www.eventid.net/display.asp?
    > eventid=560&source=security
    > >
    > >CET
    > >
    > >
    > >"GeebMan" <anonymous@discussions.microsoft.com> wrote in
    > message
    > >news:092e01c3bdac$1f33d120$a501280a@phx.gbl...
    > >> I have an XP workstation that is getting this recurring
    > >> event in the security log. It gets it about twice every
    > >> second and is filling up the log. This just started
    > >> occuring a few days ago and it is the only workstation
    > >> that is registering this error. All other WS in the
    > >> domain are fine. Any ideas...
    > >>
    > >>
    > >> Event Type: Failure Audit
    > >> Event Source: Security
    > >> Event Category: Object Access
    > >> Event ID: 560
    > >> Date: 12/8/2003
    > >> Time: 9:58:41 AM
    > >> User: XXXX\XXXXXXXXXX
    > >> Computer: XXX_XX
    > >> Description:
    > >> Object Open:
    > >> Object Server: Security
    > >> Object Type: File
    > >> Object Name: \Device\NetBT_Tcpip_{E0F71A16-
    > >> D997-4C0B-A60C-8488C7C6DFE9}
    > >> Handle ID: -
    > >> Operation ID: {0,1434186}
    > >> Process ID: 700
    > >> Image File Name: C:\WINDOWS\EXPLORER.EXE
    > >> Primary User Name: XXXXXXX
    > >> Primary Domain: XXXX
    > >> Primary Logon ID: (0x0,0x57A54)
    > >> Client User Name: -
    > >> Client Domain: -
    > >> Client Logon ID: -
    > >> Accesses: SYNCHRONIZE
    > >> ReadData (or ListDirectory)
    > >> WriteData (or AddFile)
    > >>
    > >> Privileges: -
    > >> Restricted Sid Count: 0
    > >>
    > >>
    > >
    > >
    > >.
    > >

  • Next message: swo: "perl cgi problem on Windows 2003 Server"

    Relevant Pages

    • Re: Longer coaches or battery cages.
      ... transport, conveniently hiding them from rail passengers, is the very ... If a separate system was provided which made it just as easy for a disabled person to go into town and go to the cinema, or wherever/whatever they wanted to do, as it is for an able bodied person to use generic public transport, you'd see far more disabled people being able to integrate with society and get on with doing all the things the rest of us do, with the rest of us. ... My suggestion is that the disabled should be given a system that puts them on a "level playing field" with the rest of us. ...
      (uk.railway)
    • Re: Is Record Open
      ... Access does not expose this information to you. ... the logging form's Dirty event would be much better. ... rather than allenbrowne at mvps dot org. ... > i have a multiuser database and when 1 user opens the form to edit a ...
      (microsoft.public.access.forms)
    • Re: Kommunkation zwischen Excahnge 2003 und 2007
      ... Wär auch mal interessant zu wissen was das SMTP Transport Log so spricht. ... Dreh mal SMTP Logging auf und schick ein mail - versucht der 2003er ...
      (microsoft.public.de.exchange)
    • Re: Getting from Epsom to Cheltenham (without the car)
      ... the suggestion of asking in the appropriate place. ... What is inappropriate about this newsgroup? ... because using just rail isn't as straightforward as it ought to be. ... 'transport', regardless of the nature of said transport, question. ...
      (uk.transport)
    • Re: Getting from Epsom to Cheltenham (without the car)
      ... the suggestion of asking in the appropriate place. ... 'transport', regardless of the nature of said transport, question. ... I still find it interesting that Doug claims to ... it as an opportunity to talk about cars. ...
      (uk.transport)