Audit Failure

[Roger J]

Can someone tell me what the following error means.

EVENT # : 209575

EVENTLOG : Security

EVENT TYPE : AUDIT FAILURE

SOURCE : Security

CATEGORY : Directory Service Access

EVENT ID : 565

USERNAME : RECSNET\RUNZLTCLS$

COMPUTER : RECSDC01

TIME : 9/29/2003 8:39:58 AM

MESSAGE : Object Open:

Object Server: DS

Object Type: %{bf967a86-0de6-11d0-a285-00aa003049e2}

Object Name: %{4fbfbdba-a4a6-4883-9e0d-f16e6c5bcd8c}

New Handle ID: -

Operation ID: {0,12713316}

Process ID: 272

Primary User Name: RECSDC01$

Primary Domain: RECSNET

Primary Logon ID: (0x0,0x3E7)

Client User Name: RUNZLTCLS$

Client Domain: RECSNET

Client Logon ID: (0x0,0xC1FD3D)

Accesses %Write Property


Privileges -

Properties:

%Create Child

%Control Access

%{e48d0154-bcf8-11d1-8702-00c04fb96050}

%{f3a64788-5306-11d1-a9c5-0000f80367c1}

 

[Bruno]

This is one of many possibilities:

A non-authorized user attempted to create a user account or computer account
within a given organizational unit, in which they do NOT sufficient
priviledges.

 

[Roger J]

Why would computers be trying to create a computer account
with a $ sign after it?

Roger