EVENT ID 562

[Guest Maqsood]

we have MS Exchange 2003 on Cluster, Windows 2003 enterprise.

 

Event ID 562 is getting generated on Security logs, in one hour the logs

file is increasing to 4 MB and at times to 8 MB, as a result some of the mail

boxes and shared calander do not open.

 

What is the cause and how do we elimitate these events.

 

 

--

Maqsood Ali Khan

[Guest Thee Chicago Wolf]

Re: EVENT ID 562

 

>we have MS Exchange 2003 on Cluster, Windows 2003 enterprise.

>

>Event ID 562 is getting generated on Security logs, in one hour the logs

>file is increasing to 4 MB and at times to 8 MB, as a result some of the mail

>boxes and shared calander do not open.

>

>What is the cause and how do we elimitate these events.

 

This is a good place to start:

http://www.eventid.net/display.asp?eventid=562&source=

 

- Thee Chicago Wolf

[Guest Maqsood]

Re: EVENT ID 562

 

thanks for your post.

 

is there a solution from Microsoft, it appreas event ID site needs

subscription for futher details

--

Maqsood Ali Khan

 

 

"Thee Chicago Wolf" wrote:

> >we have MS Exchange 2003 on Cluster, Windows 2003 enterprise.

> >

> >Event ID 562 is getting generated on Security logs, in one hour the logs

> >file is increasing to 4 MB and at times to 8 MB, as a result some of the mail

> >boxes and shared calander do not open.

> >

> >What is the cause and how do we elimitate these events.

>

> This is a good place to start:

> http://www.eventid.net/display.asp?eventid=562&source=

>

> - Thee Chicago Wolf

>

[Guest Thee Chicago Wolf]

Re: EVENT ID 562

 

>thanks for your post.

>

>is there a solution from Microsoft, it appreas event ID site needs

>subscription for futher details

 

No, it does not. You enter the event ID number, click search and see

results. http://www.eventid.net/display.asp?eventid=562&source=

 

All you have to do is click the link next to "Details" to see what

others have to say about the event ID. There are 3 that I see. Click

the link above to see the entries.

 

- Thee Chicago Wolf

[Guest Maqsood]

Re: EVENT ID 562

 

Thanks agian,

 

Second option is the nearest to the problem i am facing :

 

Mihai Andrei (Last update 11/9/2005):

As per Microsoft: "The handle to the accessed object was successfully

closed". See MSW2KDB for additional information about this event.

 

This problem may occur if you turn on auditing for the Object Access

category and the Directory Service Access category and the default System

Access Control List (ACL) is configured on the affected objects. See M836419

for details.

--

Selection of the details points to subscription.

 

Maqsood Ali Khan

 

 

"Thee Chicago Wolf" wrote:

> >thanks for your post.

> >

> >is there a solution from Microsoft, it appreas event ID site needs

> >subscription for futher details

>

> No, it does not. You enter the event ID number, click search and see

> results. http://www.eventid.net/display.asp?eventid=562&source=

>

> All you have to do is click the link next to "Details" to see what

> others have to say about the event ID. There are 3 that I see. Click

> the link above to see the entries.

>

> - Thee Chicago Wolf

>