Meaning of This Failure Audit EventID 560

Can someone explain to me the meaning of a security audit failure on EventID
560 for the object cited below? The SID (modified) below is for a domain
account that is in the Administrators group of the computer on which the
security audit appears. The console login is for that domain account.
The domain account has Full Control access on the registry key cited below.

It's not clear to me if the failure is for the computer object in the
domain, or if it is for the domain user.


Object Open:
Object Server: Security
Object Type: Key
Object Name: \REGISTRY\USER\S-1-5-21-782619286-9999999999-999999999-9918
Handle ID: -
Operation ID: {0,367218}
Process ID: 1284
Image File Name: C:\WINDOWS\system32\svchost.exe
Primary User Name: MYCOMPUTER$
Primary Domain: MY-DOMAIN
Primary Logon ID: (0x0,0x3E7)
Client User Name: my-admin-userid
Client Domain: MY-DOMAIN
Client Logon ID: (0x0,0x19E68)
Accesses: MAX_ALLOWED

Privileges: -
Restricted Sid Count: 0
Access Mask: 0x2000000

--
Will


.

Relevant Pages

  • RE: Penetration test of 1 IP address
    ... Penetration test of 1 IP address ... It does not look like the login screen found on the ... general a security audit is considered a review of a system with all ... greatly in the amount of assurance you can provide the client on a ...
    (Pen-Test)
  • RE: Penetration test of 1 IP address
    ... regards to carrying out the actual testing phase of the engagement so I will ... "I have been asked to perform a security audit of 1 IP address for client." ... If I enter the IP address and then /webblaze, I am taken to a login page ...
    (Pen-Test)
  • Re: how to prevent re-use of passwords
    ... I have a client that has been subject to a security audit by their ... Steve Fabac ... command would set a default that prevents reuse of passwords but I'm ...
    (comp.unix.sco.misc)
  • Re: Server security audit cleared by strange computer name
    ... > When I logon to a server today I noticed a messenger server pop up ... > As a curiosity I checked the security audit all logs entried were ... > Primary logon ID: ... > Client UserName: Administrator ...
    (microsoft.public.security)