Re: Event 560 SC Manager

Hi Steven,

Apologies for the delay getting back.

I have disabled the audit object access in group policy but we still
seem to be getting the errors.

Any more ideas?

Thanks

Steven Zhu [MSFT] wrote:
Hi,

Thanks for posting here.

From you post, I understand the issue is that you get a lot of 560 Failure
audit errors in your computer. If I am off base, please feel free to let me
know.

Based on my knowledge, the failure audit error is related to object access.
These audit error occurs because the "audit object access" policy has been
enabled in Group Policy or local security policy. Disabling this policy
will clear such errors.

Failed access attempts are absolutely normal during normal Windows
operation. Many times Windows uses a failed access attempt as a cue on how
to behave (enable this button vs. disable this button, depending on whether
you have access, etc.).

You can disable either the Object Access audit policy or disable the
specific files from being audited.

245630 Event 560 Failures Appears When File and Object Auditing Is Enabled
http://support.microsoft.com/?id=245630

To summarize, usually this is not something to be concerned with. As
noted, if auditing these files does not provide you any tangible results,
it is recommended that you disable the policy.

I hope the above information helps.

Have a nice day.

Best Regards,

Steven Zhu
MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
======================================================
PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were
updated on February 14, 2006.? Please complete a re-registration process
by entering the secure code mmpng06 when prompted. Once you have
entered the secure code mmpng06, you will be able to update your profile
and access the partner newsgroups.
======================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from this issue.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
======================================================

.