Announcement

Collapse
No announcement yet.

Decipher & Help me fix this error please

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Decipher & Help me fix this error please

    This is right from the event viewer for a Failure Audit from my Exchange 2003 Windows 2000 server.

    What does it mean and how do i get rid of it?
    -----
    Event Type: Failure Audit
    Event Source: Security
    Event Category: Object Access
    Event ID: 565
    Date: 9/8/2008
    Time: 10:11:26 AM
    User: domainname\chuck
    Computer: NTSRVR05
    Description:
    Object Open:
    Object Server: Microsoft Exchange
    Object Type: Microsoft Exchange Database
    Object Name: /o=domainname/ou=First Administrative Group/cn=Configuration/cn=Servers/cn=NTSRVR05/cn=Microsoft Private MDB
    New Handle ID: 0
    Operation ID: {0,95725468}
    Process ID: 1968
    Primary User Name: NTSRVR05$
    Primary Domain: domainname
    Primary Logon ID: (0x0,0x3E7)
    Client User Name: chuck
    Client Domain: domainname
    Client Logon ID: (0x0,0x5B4A780)
    Accesses Unknown specific access (bit

    Privileges -
    Properties:
    DELETE
    Modify public folder quotas
    Unknown specific access (bit 1)
    Unknown specific access (bit 4)
    Administer information store
    ACCESS_SYS_SEC
    %{d74a8774-2289-11d3-aa62-00c04f8eedd8}
    ---
    Mail-enable public folder
    WRITE_DAC
    SYNCHRONIZE
    Unknown specific access (bit 9)
    Unknown specific access (bit 11)
    Unknown specific access (bit 12)
    Modify public folder deleted item retention
    DELETE
    READ_CONTROL
    Unknown specific access (bit 0)
    Unknown specific access (bit 1)
    Unknown specific access (bit 2)
    Unknown specific access (bit 3)
    Unknown specific access (bit 4)
    Modify public folder expiry
    DELETE
    READ_CONTROL
    WRITE_DAC
    WRITE_OWNER
    Unknown specific access (bit 0)
    Unknown specific access (bit 1)
    Unknown specific access (bit 2)
    Unknown specific access (bit 3)
    Unknown specific access (bit 4)
    Unknown specific access (bit 5)
    Modify public folder replica list
    View information store status
    DELETE
    READ_CONTROL
    WRITE_DAC
    WRITE_OWNER
    Unknown specific access (bit 0)
    Unknown specific access (bit 1)
    Unknown specific access (bit 2)
    Unknown specific access (bit 3)
    Unknown specific access (bit 4)
    Unknown specific access (bit 5)
    Create top level public folder
    Unknown specific access (bit 0)
    Unknown specific access (bit
    Modify public folder ACL
    ACCESS_SYS_SEC
    MAX_ALLOWED
    Modify public folder admin ACL

  • #2
    Re: Decipher & Help me fix this error please

    Hi there, have you done a google search on the event ID. Try this link and see if any of the following hits match the event type or circumstances that are getting logged.

    http://www.google.co.uk/search?sourc...vent+ID%3a+565

    Jewen.

    Comment


    • #3
      Re: Decipher & Help me fix this error please

      So basically...I gather that nothing is really wrong since Exchange is working just fine. I just need to disable the auditing then right?

      Comment


      • #4
        Re: Decipher & Help me fix this error please

        Read the comments near the bottom:
        http://www.eventid.net/display.asp?e...curity&phase=1
        ** Remember to give credit where credit is due and leave reputation points where appropriate **

        Comment

        Working...
        X