
10-02-2007, 08:20 AM
|
| |
| Re: Failure Audit on Event Log Hi this link don't help me my friend do you know other way?
"Gerry" wrote:
> Ludwin
>
> http://www.eventid.net/display.asp?e...curity&phase=1
>
> --
>
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
> Ludwin Pacheco wrote:
> > Hi, I have this error:
> >
> > Event Type: Failure Audit
> > Event Source: Security
> > Event Category: Object Access
> > Event ID: 560
> > Date: 9/28/2007
> > Time: 10:28:52 AM
> > User: CAPACOMCY\kurdaneta
> > Computer: CAPACO-MCY
> > Description:
> > Object Open:
> > Object Server: SC Manager
> > Object Type: SC_MANAGER OBJECT
> > Object Name: ServicesActive
> > Handle ID: -
> > Operation ID: {0,101857905}
> > Process ID: 612
> > Image File Name: C:\WINDOWS\system32\services.exe
> > Primary User Name: CAPACO-MCY$
> > Primary Domain: CAPACOMCY
> > Primary Logon ID: (0x0,0x3E7)
> > Client User Name: kurdaneta
> > Client Domain: CAPACOMCY
> > Client Logon ID: (0x0,0x6123337)
> > Accesses: READ_CONTROL
> > Connect to service controller
> > Enumerate services
> > Query service database lock state
> >
> > Privileges: -
> > Restricted Sid Count: 0
> > Access Mask: 0x20015
> >
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> > I have Windows 2003 Server and the all workstations have installed
> > Windows XP SP2; I need you help to resolve this error.
> >
> > NOTE: But I include the account on Domain Admins group, this account
> > don't show me this error on event viewer, and then I out this account
> > from Domain Admin group the error show me againt.
> >
> > Please let know.
>
>
> |