Re: Access is denied

Sorry I left out the message in the event log


"Fred Jacobowitz" <Oakleigh@xxxxxxxxxxxxx> wrote in message
news:uH1vw3aSFHA.244@xxxxxxxxxxxxxxxxxxxxxxx
>I can't figure it out. I turned on audit privlege use "Failure" and
>captured this entry in the event log.

Event Type: Failure Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 577
Date: 4/25/2005
Time: 11:26:48 AM
User: MICRON\Administrator
Computer: MICRON
Description:
Privileged Service Called:
Server: Security
Service: -
Primary User Name: Administrator
Primary Domain: MICRON
Primary Logon ID: (0x0,0x13FF10)
Client User Name: -
Client Domain: -
Client Logon ID: -
Privileges: SeTcbPrivilege

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
This article goes on to say this was fixed in service pack 2. I am running
service pack 2.
>
> The administrator and administrators have full control of the objects in
> windows\system32.
>
> Curious though - under c:\documents and settings i have the following
> folders
> Administrator
> Administrator.MICRON
> ADMINI~1~MIC
> Fred
> Mara
> Leah.MICRON
>
> and the 'active' directory when i log as administrator is
> Administrator.MICRON (based on date modified)
> By the way, MICRON is the Computer Name.
>
> Perhaps this is causing my problems?
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Privilege Use
> Event ID: 577
> Date: 4/25/2005
> Time: 11:26:48 AM
> User: MICRON\Administrator
> Computer: MICRON
> Description:
> Privileged Service Called:
> Server: Security
> Service: -
> Primary User Name: Administrator
> Primary Domain: MICRON
> Primary Logon ID: (0x0,0x13FF10)
> Client User Name: -
> Client Domain: -
> Client Logon ID: -
> Privileges: SeTcbPrivilege
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>


.

Relevant Pages

  • Event ID 578 logged 4 times every second
    ... Event Source: Security ... Event Category: Privilege Use ... Primary User Name: APP1$ ... Client Domain: PROD ...
    (microsoft.public.win2000.security)
  • RE: Question regarding su.exe
    ... Many so called "administrator" applications do ... For instance, loading a driver should require admin rights, ... If you use su.exe to elevate the privilege ... Rather than using su or giving admin access, have you looked at what the app ...
    (Focus-Microsoft)
  • Re: unable to installed software. No rights
    ... If the default is 60 minutes then this means that machine policy will be ... If users in your environment don't have rights ... this checkbox doesn't make any difference on SMS Advanced client. ... Please log in as an administrator or contact your network ...
    (microsoft.public.sms.swdist)
  • Re: Rights and Policies
    ... ones that already exist from before the client PC was joined to the domain, ... Administrator account, and install the application. ... Then have the user with regular non-admin rights ...
    (microsoft.public.windows.server.sbs)
  • Re: Rights and Policies
    ... you would log onto the client PC with either the Local or Domain ... Administrator account, and install the application. ... Then have the user with regular non-admin rights log ...
    (microsoft.public.windows.server.sbs)