Event ID 560 (SC_MANAGER OBJECT)

G

Guest

I am getting this error message everytime the system boots up. How do I fix
this problem?

Source: Security
Event ID: 560
Category: Object Access
User: NT AUTHORITY\NETWORK SERVICE

Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,50957}
Process ID: 828
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: C9060931$
Primary Domain: RSP
Primary Logon ID: (0x0,0x3E7)
Client User Name: NETWORK SERVICE
Client Domain: NT AUTHORITY
Client Logon ID: (0x0,0x3E4)
Accesses: READ_CONTROL
Connect to service controller
Lock service database for exclusive access

Privileges: -
Restricted Sid Count: 0
 
S

Steven L Umbach

Object access events can be somewhat obscure and I would not worry about it
if everything is working well. Unless you have a specific need to audit
object access such as to audit access to folders you may want to disable it
in Local Security Policy or the domain level policy that enforces it. By
default it is not enabled on XP.

Steve
 
G

Guest

I found the hotfix for it, Q910720.

Steven L Umbach said:
Object access events can be somewhat obscure and I would not worry about it
if everything is working well. Unless you have a specific need to audit
object access such as to audit access to folders you may want to disable it
in Local Security Policy or the domain level policy that enforces it. By
default it is not enabled on XP.

Steve
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top