Security Event 560 every 2 minutes

[Guest]

XP Pro SP 2 machine is posting a Security Event 560 every 2 minutes? The
event is as follows:

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 11/13/2006
Time: 12:10:05 PM
User: SBL\jbyrd
Computer: SBLJBYRDGX280
Description:
Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,1377485}
Process ID: 816
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: SBLJBYRDGX280$
Primary Domain: SBL
Primary Logon ID: (0x0,0x3E7)
Client User Name: jbyrd
Client Domain: SBL
Client Logon ID: (0x0,0x2287F)
Accesses: DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
Connect to service controller
Create a new service
Enumerate services
Lock service database for exclusive access
Query service database lock state
Set last-known-good state of service database

Privileges: -
Restricted Sid Count: 0


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

 

[MowGreen [MVP]]

Mike,

See if this helps - Event IDs 560 and 562 appear many times in the
security event log
http://support.microsoft.com/kb/841001

MowGreen [MVP 2003-2007]
===============
*-343-* FDNY
Never Forgotten
===============