Event ID: 560

Discussion in 'Server Security' started by GraXi, Sep 20, 2004.

  1. GraXi

    GraXi Guest

    Hello Everyone;

    I need some help with this issue and if someone is familiar with it please
    let me know how to fix it...PLEASEEEE!

    Ok...this is the Domain Contoller / File server...APPFPSVR a Windows 2003
    Server box.

    Everytime ANYONE under the Domain Admins GG group logs into the server the
    security event returns an error:

    Event Type: Failure Audit
    Event Source: Security
    Event Category: Object Access
    Event ID: 560
    Date: 9/20/2004
    Time: 1:34:02 PM
    User: NT AUTHORITY\SYSTEM
    Computer: APPFPSVR
    Description:
    Object Open:
    Object Server: Security
    Object Type: File
    Object Name: H:\Shares\Users\lucy.mullen\Profile\Temporary Internet
    Files\Content.IE5\83C5MFUP\snf2_utilities[1].js
    Handle ID: -
    Operation ID: {0,7217003}
    Process ID: 1404
    Image File Name: C:\Program Files\CA\eTrust Antivirus\InoRT.exe
    Primary User Name: APPFPSVR$
    Primary Domain: PEFCU
    Primary Logon ID: (0x0,0x3E7)
    Client User Name: -
    Client Domain: -
    Client Logon ID: -
    Accesses: READ_CONTROL
    SYNCHRONIZE
    ReadData (or ListDirectory)
    ReadEA
    ReadAttributes

    =======================

    I cant figure out the problem. If anyone logs into this server ts will
    actually log this into the Security Event Viewer, like the person who just
    logged into the server is trying to access that directory. Has anyone seen
    this error around or knows how to resolve it?

    Thanks.
     
    GraXi, Sep 20, 2004
    #1
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.