Jump to content

Setting up Audit to a file server but getting Event ID: 560 and 562 every 10 seconds!


Recommended Posts

Guest Nutzer
Posted

All,

 

I am trying to set up audits for folders in my file server. I understand

that I need to "Enable" Audit Object Access in the local Group Policy of the

server. Then go to the folders and select the group/users you want to

monitor for the folder. Everything seems to be working and I can view users

when they delete, read etc... a folder BUT I'm also getting Event ID: 560

and 562 20x a second in the Event Viewer of Security. I've read the MS

article http://support.microsoft.com/kb/841001

 

A sample of the Event ID: 562:

Handle Closed:

 

Object Server: Security

 

Handle ID: 636

 

Process ID: 7412

 

Image File Name: C:\WINDOWS\system32\mmc.exe

 

 

 

What should I do to fix this?

 

Thanks for any info!

  • Replies 0
  • Created
  • Last Reply

Popular Days


×
×
  • Create New...