RE: Failure Audit (eventid 577) and Remote Desktop
From: Davor (Davor_at_discussions.microsoft.com)
Date: 06/19/05
- Previous message: S. Pidgorny
: "Re: detecting keyloogers" - Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 19 Jun 2005 11:25:02 -0700
It would be cool if some of the MS dudes looked into this as Ricky and Wilson
aren't the only ones with this problem. There seems to be very little detail
about the failure.
Here is a copy of the probably the same event log:
Event Type: Failure Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 577
Date: 19/06/2005
Time: 20:09:45
User: HOME\Administrator
Computer: JOHNNY
Description:
Privileged Service Called:
Server: Security
Service: -
Primary User Name: Administrator
Primary Domain: HOME
Primary Logon ID: (0x0,0xC0E80D)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeTcbPrivilege
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
"Ricky" wrote:
> Every time I log on my 2003 server via Remote Desktop a Failure Audit event
> (577) is logged.
> Although, I have not any visible problem using the server with Remote
> Desktop.
> Anyone can tell me why and if I can correct these, please?
>
> Thanks a lot.
>
> Riccardo
>
>
>
- Previous message: S. Pidgorny
: "Re: detecting keyloogers" - Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]