Jump to content

Failure Audit on Event Log


Recommended Posts

Guest Ludwin Pacheco
Posted

Hi, I have this error:

 

Event Type: Failure Audit

Event Source: Security

Event Category: Object Access

Event ID: 560

Date: 9/28/2007

Time: 10:28:52 AM

User: CAPACOMCY\kurdaneta

Computer: CAPACO-MCY

Description:

Object Open:

Object Server: SC Manager

Object Type: SC_MANAGER OBJECT

Object Name: ServicesActive

Handle ID: -

Operation ID: {0,101857905}

Process ID: 612

Image File Name: C:\WINDOWS\system32\services.exe

Primary User Name: CAPACO-MCY$

Primary Domain: CAPACOMCY

Primary Logon ID: (0x0,0x3E7)

Client User Name: kurdaneta

Client Domain: CAPACOMCY

Client Logon ID: (0x0,0x6123337)

Accesses: READ_CONTROL

Connect to service controller

Enumerate services

Query service database lock state

 

Privileges: -

Restricted Sid Count: 0

Access Mask: 0x20015

 

 

For more information, see Help and Support Center at

http://go.microsoft.com/fwlink/events.asp.

 

I have Windows 2003 Server and the all workstations have installed Windows

XP SP2; I need you help to resolve this error.

 

NOTE: But I include the account on Domain Admins group, this account don't

show me this error on event viewer, and then I out this account from Domain

Admin group the error show me againt.

 

Please let know.

  • Replies 2
  • Created
  • Last Reply

Popular Days

Posted

Re: Failure Audit on Event Log

 

Ludwin

 

http://www.eventid.net/display.asp?eventid=560&eventno=57&source=Security&phase=1

 

--

 

 

 

Hope this helps.

 

Gerry

~~~~

FCA

Stourport, England

Enquire, plan and execute

~~~~~~~~~~~~~~~~~~~

 

Ludwin Pacheco wrote:

> Hi, I have this error:

>

> Event Type: Failure Audit

> Event Source: Security

> Event Category: Object Access

> Event ID: 560

> Date: 9/28/2007

> Time: 10:28:52 AM

> User: CAPACOMCY\kurdaneta

> Computer: CAPACO-MCY

> Description:

> Object Open:

> Object Server: SC Manager

> Object Type: SC_MANAGER OBJECT

> Object Name: ServicesActive

> Handle ID: -

> Operation ID: {0,101857905}

> Process ID: 612

> Image File Name: C:\WINDOWS\system32\services.exe

> Primary User Name: CAPACO-MCY$

> Primary Domain: CAPACOMCY

> Primary Logon ID: (0x0,0x3E7)

> Client User Name: kurdaneta

> Client Domain: CAPACOMCY

> Client Logon ID: (0x0,0x6123337)

> Accesses: READ_CONTROL

> Connect to service controller

> Enumerate services

> Query service database lock state

>

> Privileges: -

> Restricted Sid Count: 0

> Access Mask: 0x20015

>

>

> For more information, see Help and Support Center at

> http://go.microsoft.com/fwlink/events.asp.

>

> I have Windows 2003 Server and the all workstations have installed

> Windows XP SP2; I need you help to resolve this error.

>

> NOTE: But I include the account on Domain Admins group, this account

> don't show me this error on event viewer, and then I out this account

> from Domain Admin group the error show me againt.

>

> Please let know.

Guest Ludwin Pacheco
Posted

Re: Failure Audit on Event Log

 

Hi this link don't help me my friend do you know other way?

 

"Gerry" wrote:

> Ludwin

>

> http://www.eventid.net/display.asp?eventid=560&eventno=57&source=Security&phase=1

>

> --

>

>

>

> Hope this helps.

>

> Gerry

> ~~~~

> FCA

> Stourport, England

> Enquire, plan and execute

> ~~~~~~~~~~~~~~~~~~~

>

> Ludwin Pacheco wrote:

> > Hi, I have this error:

> >

> > Event Type: Failure Audit

> > Event Source: Security

> > Event Category: Object Access

> > Event ID: 560

> > Date: 9/28/2007

> > Time: 10:28:52 AM

> > User: CAPACOMCY\kurdaneta

> > Computer: CAPACO-MCY

> > Description:

> > Object Open:

> > Object Server: SC Manager

> > Object Type: SC_MANAGER OBJECT

> > Object Name: ServicesActive

> > Handle ID: -

> > Operation ID: {0,101857905}

> > Process ID: 612

> > Image File Name: C:\WINDOWS\system32\services.exe

> > Primary User Name: CAPACO-MCY$

> > Primary Domain: CAPACOMCY

> > Primary Logon ID: (0x0,0x3E7)

> > Client User Name: kurdaneta

> > Client Domain: CAPACOMCY

> > Client Logon ID: (0x0,0x6123337)

> > Accesses: READ_CONTROL

> > Connect to service controller

> > Enumerate services

> > Query service database lock state

> >

> > Privileges: -

> > Restricted Sid Count: 0

> > Access Mask: 0x20015

> >

> >

> > For more information, see Help and Support Center at

> > http://go.microsoft.com/fwlink/events.asp.

> >

> > I have Windows 2003 Server and the all workstations have installed

> > Windows XP SP2; I need you help to resolve this error.

> >

> > NOTE: But I include the account on Domain Admins group, this account

> > don't show me this error on event viewer, and then I out this account

> > from Domain Admin group the error show me againt.

> >

> > Please let know.

>

>

>


×
×
  • Create New...