Event ID 565

[Guest]

After Installing exchange server I am getting event ID 565 whenever a user
tries to logon with the wrong password or username.

the Security log looks like this:



Type : Failure
User: (domain name)\(exchange server name)$
Computer: (domain controller name)
Source: Security
Category: Directory Service Access
Event ID: 565

Object Open:
Object Server: DS
Object Type: configuration
Object Name: CN=Configuration,DC=(Domain Name),DC=net
New Handle ID: -
Operation ID: {0,7592562}
Process ID: 280
Primary User Name: DCName$
Primary Domain: (Domain Name)
Primary Logon ID: (0x0,0x3E7)
Client User Name: EXCHSRV$
Client Domain: (Domain Name)
Client Logon ID: (0x0,0x73DA66)
Accesses Control Access

Privileges -

Properties:
READ_CONTROL
Create Child
Delete Child
List Contents
Write Self
Delete Tree
Manage Replication Topology


Thanks,

John

 

[Jerold Schulman]

After Installing exchange server I am getting event ID 565 whenever a user
tries to logon with the wrong password or username.

the Security log looks like this:



Type : Failure
User: (domain name)\(exchange server name)$
Computer: (domain controller name)
Source: Security
Category: Directory Service Access
Event ID: 565

Object Open:
Object Server: DS
Object Type: configuration
Object Name: CN=Configuration,DC=(Domain Name),DC=net
New Handle ID: -
Operation ID: {0,7592562}
Process ID: 280
Primary User Name: DCName$
Primary Domain: (Domain Name)
Primary Logon ID: (0x0,0x3E7)
Client User Name: EXCHSRV$
Client Domain: (Domain Name)
Client Logon ID: (0x0,0x73DA66)
Accesses Control Access

Privileges -

Properties:
READ_CONTROL
Create Child
Delete Child
List Contents
Write Self
Delete Tree
Manage Replication Topology


Thanks,

John

The following Microsoft Knowledge Base articles deal with Exchange and Event ID 565:

http://support.microsoft.com?kbid=314294 "XADM: Exchange 2000 Error Messages Are Generated Because of SeSecurityPrivilege Right and Policytest Issues "
http://support.microsoft.com?kbid=331655 "Users Cannot Send Messages as a Public Folder After You Grant 'Send As' Permissions "
http://support.microsoft.com?kbid=813229 "XADM: Failure Audit Security Event ID Messages Are Logged When You Open a Mailbox That You Have Delegate Access To "
http://support.microsoft.com?kbid=828070 "Exchange Server Mailbox Store does not mount when the Mailbox Store database reaches the 16-GB limit "