Re: Exchange and 565 Security Errors

Tech-Archive recommends: Speed Up your PC by fixing your registry

Hello Bill,

I am so sorry for mistake your post.

From your post, my understanding on this issue is: you received the
following Failure Audit in the event log.

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 565

If I'm off base, please feel free to let me know.

First at all, I suggest you refer to the following knowledge base article
to solve this issue:

XADM: Failure Audit Security Event ID Messages Are Logged When You Open a
Mailbox That You Have Delegate Access To
http://support.microsoft.com/kb/813229/en-us

Note: This article can apply to Exchange 2003 server.

Based on my knowledge, the 565 failure audit may log when a mailbox is
logged on by an account that is not associated to the mailbox. I would let
you know that this audit will not cause any severe problem on your Exchange
server. You are most likely able to safely ignore this audit.

To confirm if we can ignore this audit, I would provide the following
troubleshooting steps.

1. Please create a new mailbox enabled account on the second Exchange 2003
server and log on this new mailbox. Please verify if this audit is also
logged.

2. It is recommended you apply Exchange 2003 service pack 1 which can be
obtained from the link below.

Exchange Server 2003 Service Pack 1
http://www.microsoft.com/downloads/details.aspx?FamilyID=42656083-784d-4e7e-
b032-2cb6433bec00&DisplayLang=en

Please let me know the results so that I can provide further assistance on
this problem. I am looking forward to your reply.

Thanks and have great day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================







.

Relevant Pages

  • Re: set audit/listener
    ... I think DCL will be to slow in case of huge flow of audit. ... device, say a mailbox. ... audit server to send you a copy of audit messages. ... Session 1> read audit_mbx record ...
    (comp.os.vms)
  • Re: Running VMS off CD
    ... >>Set up a detached process running a program you write which establishes ... >>reading from the mailbox, as to do so would jam up the audit system. ...
    (comp.os.vms)
  • Re: set audit/listener
    ... as far as I understand the help, I may redirect audit events to a ... device, say a mailbox. ... audit server to send you a copy of audit messages. ... Session 1> read audit_mbx record ...
    (comp.os.vms)
  • Auditing mailbox access
    ... opens another user's mailbox? ... We need to audit our Domain ... Admins and make sure no one is reading mail when they ...
    (microsoft.public.exchange.admin)
  • Re: Login Failures
    ... my understanding on this issue is: you get many success ... Actually, by default, you can find the following audit settings in Windows ... XP/2000 computer tries to use Kerberos authentication before using NTLM ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)