J
Jay
One of the XP machine in my company is continually
logging below event in which always fill up the securily
log. Once the security log is full, a non-administrator
user (domain user) are not able to login. Although, I've
fixed this by clearing the logs and set is to overwrite
once it is full. But I would like to know why this PC
keeps on logging this event. Any expert can explain this
to me?
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 12/8/2003
Time: 7:57:42 AM
User: S-1-5-21-380265454-721816923-8547516-1740
Computer: KAJPLTXP-03
Description:
Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,229773}
Process ID: 1308
Image File Name: C:\WINDOWS\system32
\services.exe
Primary User Name: KAJPLTXP-03$
Primary Domain: KROGASIA
Primary Logon ID: (0x0,0x3E7)
Client User Name: tasano
Client Domain: KROGASIA
Client Logon ID: (0x0,0x11406)
Accesses: Connect to service
controller
Lock service database for
exclusive access
Privileges: -
Restricted Sid Count: 0
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
logging below event in which always fill up the securily
log. Once the security log is full, a non-administrator
user (domain user) are not able to login. Although, I've
fixed this by clearing the logs and set is to overwrite
once it is full. But I would like to know why this PC
keeps on logging this event. Any expert can explain this
to me?
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 12/8/2003
Time: 7:57:42 AM
User: S-1-5-21-380265454-721816923-8547516-1740
Computer: KAJPLTXP-03
Description:
Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,229773}
Process ID: 1308
Image File Name: C:\WINDOWS\system32
\services.exe
Primary User Name: KAJPLTXP-03$
Primary Domain: KROGASIA
Primary Logon ID: (0x0,0x3E7)
Client User Name: tasano
Client Domain: KROGASIA
Client Logon ID: (0x0,0x11406)
Accesses: Connect to service
controller
Lock service database for
exclusive access
Privileges: -
Restricted Sid Count: 0
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.