RE: event: 566 Object Access Audit Failure



http://support.microsoft.com/kb/924255/en-us

http://www.eventid.net/display.asp?eventid=566&eventno=4015&source=Security&phase=1

--
NetAdmin <São Paulo, BR>

"meadben" wrote:

I would like to know how to handel these failures.

They seem to come up when a workstation has been rebooted.

Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 566
Date: 2/12/2008
Time: 11:29:29 AM
User: DOMAIN\WSNAME$
Computer: DC1
Description:
Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: dnsNode
Object
Name: DC=141,DC=1.168.192.in-addr.arpa,CN=MicrosoftDNS,CN=System,DC=domain,DC=local
Handle ID: -
Primary User Name: DC1$
Primary Domain: DOMAIN
Primary Logon ID: (0x0,0x3E7)
Client User Name: WSNAME$
Client Domain: DOMAIN
Client Logon ID: (0x0,0x49C520)
Accesses: Write Property

Properties:
---
Default property set
dnsRecord
dNSTombstoned
dnsNode

Additional Info:
Additional Info2:
Access Mask: 0x20


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

.



Relevant Pages