Guest Nutzer Posted March 13, 2008 Posted March 13, 2008 All, I am trying to set up audits for folders in my file server. I understand that I need to "Enable" Audit Object Access in the local Group Policy of the server. Then go to the folders and select the group/users you want to monitor for the folder. Everything seems to be working and I can view users when they delete, read etc... a folder BUT I'm also getting Event ID: 560 and 562 20x a second in the Event Viewer of Security. I've read the MS article http://support.microsoft.com/kb/841001 A sample of the Event ID: 562: Handle Closed: Object Server: Security Handle ID: 636 Process ID: 7412 Image File Name: C:\WINDOWS\system32\mmc.exe What should I do to fix this? Thanks for any info!
Recommended Posts