December 15, 2006 at 8:22 am
Found this in my security logs - anyone know what causes this - it is in there a ton of times for 2 different users
Event Type:Failure Audit
Event Source:Security
Event Category:Object Access
Event ID:560
Date:12/15/2006
Time:8:56:50 AM
User:DOMAIN\USER
Computer:SERVERNAME
Description:
Object Open:
Object Server:SC Manager
Object Type:SERVICE OBJECT
Object Name:MSSQLSERVER
Handle ID:-
Operation ID:{0,49456567}
Process ID:816
Image File Name:C:\WINDOWS\system32\services.exe
Primary User Name:SERVERNAME$
Primary Domain:FHLB10
Primary Logon ID:(0x0,0x3E7)
Client User Name:USERNAME
Client Domain:FHLB10
Client Logon ID:(0x0,0x2F2A5AB)
Accesses:READ_CONTROL
Query service configuration information
Query status of service
Enumerate dependencies of service
Query information from service
Privileges:-
Restricted Sid Count:0
Access Mask:0x2008D
December 15, 2006 at 10:13 am
Viewing 2 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply