unknown security priveleges...

[rob]

anyone explaint this? i used windows help but it
didn't clear anything up for me.
Event Type: Failure Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 577
Date: 25-Apr-04
Time: 12:08:25
User: EMBRYA\rob hill
Computer: EMBRYA
Description:
Privileged Service Called:
Server: Security
Service: -
Primary User Name: rob hill
Primary Domain: EMBRYA
Primary Logon ID: (0x0,0xF4D4)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeTcbPrivilege

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

i was searching thru the articles to find anything about
this event that keeps re-occuring in my security log. i
only found one article in here about it and it was un-
resolved. it doesn't seem to be hindering my system at all
but it keeps showing up so i would like to know wut in the
world it is.
..

 

[$eSnail3000]

i was searching thru the articles to find anything about

this event that keeps re-occuring in my security log. i
only found one article in here about it and it was un-
resolved. it doesn't seem to be hindering my system at all
but it keeps showing up so i would like to know wut in the
world it is.
.

Audit errors like this happen when an object, usually some application,
tries to use a resource for which authentication is required. A wrong user
name and pass is given, for a failure audit event is recorded by your
system. Question you should ask is who is rob hill? Is he local user, is
he domain user that uses your computer, or domain user that does not uses
your computer. In the later case you can create computer object for your
computer in active directory, and deny all access to that user.


AL

 

[Roger Abell]

SeTcbPrivilege is surfaced in the User Rights as
Act as Part of the Operating System

This in not normally granted to accounts, and any
account with this granted would have broad powers
to do things the account normally should not be able
to do.

You need to track down what of the things running in
the account it is that is causing this message, as whatever
that application is, it is expecting that the account has
this been granted this user right.

 

[Guest]

thank you. the only prob is that i am the only user on
this machine, hehe. the acccount in question is mine.