January 3, 2017 at 11:02 am
Hi,
I use Redgate Source Control and recently noticed a large number of Security Log entries on the production server. They been there all along, I had not been aware until recently.
I attribute this to Redgate Source Control because it only happens when I open SSMS(2008, 2014, or 2016) from my WS where I have Redgate installed, and I've also opened SSMS from other locations, connected to the same server and do not see these security log entries.
These are occurring about every 10 seconds.
ObjectServer Security
ObjectType Key
ObjectName \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters
HandleId 0x248
AccessMask %%1537 %%1538 %%1539 %%1540 %%4432 %%4433 %%4434 %%4435 %%4436 %%4437
PrivilegeList SeTakeOwnershipPrivilege
ProcessId 0xd70
ProcessName C:\Windows\System32\wbem\WmiPrvSE.exe
Perhaps I should post this at Redgate, but to be honest - I'm less than impressed with their support.
Has anyone else seen this ?
January 13, 2017 at 1:19 pm
So is this a SQL Server log or a RedGate log? I guess that is what you are wondering. I dont use RedGate personally but you mention source control, the only logs that I know that pertain to source control deal with check ins and the like. Could you post maybe a screen shot of what you are seeing?
----------------------------------------------------
January 13, 2017 at 1:55 pm
Budd - Tuesday, January 3, 2017 11:02 AMHi,I use Redgate Source Control and recently noticed a large number of Security Log entries on the production server. They been there all along, I had not been aware until recently.I attribute this to Redgate Source Control because it only happens when I open SSMS(2008, 2014, or 2016) from my WS where I have Redgate installed, and I've also opened SSMS from other locations, connected to the same server and do not see these security log entries.These are occurring about every 10 seconds. ObjectServer Security ObjectType Key ObjectName \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WinSock2\Parameters HandleId 0x248 AccessMask %%1537 %%1538 %%1539 %%1540 %%4432 %%4433 %%4434 %%4435 %%4436 %%4437 PrivilegeList SeTakeOwnershipPrivilege ProcessId 0xd70 ProcessName C:\Windows\System32\wbem\WmiPrvSE.exe Perhaps I should post this at Redgate, but to be honest - I'm less than impressed with their support.Has anyone else seen this ?
UPDATE - THIS IS NOT A REDGATE OR A SOURCE CONTROL ISSUE.
These Messages were being logged because I was connected to the server through SSMS with a Local Admin account.
Viewing 3 posts - 1 through 2 (of 2 total)
You must be logged in to reply to this topic. Login to reply