Exchange AD access generates Event ID 566

From: "BigChief" <bigchief@xxxxxxxxxxxxxxxx>
Date: Fri, 20 Oct 2006 14:04:08 +0200

My DC event logs get a lot of Event ID 566 when Exchange server 2003 tries
to access "CN=Deleted Objects".
Cannot find any CN with that name to check permissions on, anyone who know
where it should be?

Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: container
Object Name: CN=Deleted Objects,CN=Configuration,DC=DOMAIN1,DC=no
Handle ID: -
Primary User Name: DCONE$
Primary Domain: DOMAIN1
Primary Logon ID: (0x0,0x3E7)
Client User Name: EXCHSRV1$
Client Domain: DOMAIN1
Client Logon ID: (0x0,0x2180F1B)
Accesses: Read Property

Properties:
---
Default property set
uSNChanged
Public Information
objectClass
container
Additional Info:
Additional Info2:
Access Mask: 0x10

.

Prev by Date: Re: OWA for Exchange2003
Next by Date: Re: Exchange 2003 -> Moving db
Previous by thread: Re: OWA for Exchange2003
Next by thread: Re: Exchange 2003 -> Moving db
Index(es):
- Date
- Thread

Relevant Pages

Re: Disabling "In-coming email" on a list
... Ok I have the audit info below. ... Object Operation: ... Primary Logon ID: ... Client User Name: WSSAdmin ...
(microsoft.public.sharepoint.windowsservices)
Directory Service Access
... After upgrade from Windows 2000 to Windows 2003 i have a problem with one ... Object Operation: ... Client User Name: KDYD2AR$ ... Default property set ...
(microsoft.public.windows.server.migration)
RE: Event ID 566 Failure Audit Directory Service Access, unixUserPassw
... Damian ... Object Operation: ... Default property set ... "Claude Lachapelle" wrote: ...
(microsoft.public.security)
RE: event: 566 Object Access Audit Failure
... They seem to come up when a workstation has been rebooted. ... Object Operation: ... Default property set ...
(microsoft.public.windows.server.active_directory)