Re: Event ID 577 Filing Security Logs

Perhaps if you were to post about what privilege is not being granted and
so triggering the events. I do not normally experience what you mention
when auditing failure is enabled for privilege use.

"Rob" <Rob@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:268A3669-F1D4-4F57-97B4-707B4A465CB9@xxxxxxxxxxxxxxxx
I am having a problem with event id 577 events, in particular failure for
security privledges being generated that fill the event log within
seconds. I
have auditing of privledge use set for success and failure. From what i
have
read it seems that every RPC to a file server generates a failure event in
the security log. We have tried to add users groups to allow the right (
under user rights assignment) for priority scheduling and that did not
work.
The only suggestion that i have read that seems to work is turning off
auditing of failures for privledge use - something our security policy
forbids. Does anyone know a way to stop these events without turing off
the
auditing?
--
Rob


.

Relevant Pages

  • Re: Windows 2003 Power Cfg Permission
    ... > Enabling the auditing of privilege use gave me the info. ... After re-adding the rights to ... >> to see if it shows a failure in the security log which would indicate ...
    (microsoft.public.windows.server.security)
  • Re: Setting up security etc so Kids can play games...Need Help!!
    ... to enable auditing for access failures by users when running ... this approach involves modifying machine policy, registry ... for object access (enabling auditing for failure should be sufficient, ... modify security settings on the registry keys where failure ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Auditing Privilege Use - failure only but still get Success
    ... Success only (applies to remote access, ... Audit account management: No Auditing ... Audit privilege use: No Auditing ...
    (microsoft.public.win2000.group_policy)
  • Re: Security settings
    ... to enable the system's own object access auditing feature for any ... suspected file and registry locations that might be accessed by the ... you can then modify the security settings on only those resources to ... > for object access (enabling auditing for failure should be sufficient, ...
    (microsoft.public.windowsxp.security_admin)
  • Audit Privilege Use - Sensible to turn on/off?
    ... either fixing the app, installing SP2 or turning off auditing for Privilege ... Oliver Carr ...
    (microsoft.public.windowsxp.security_admin)