Announcement

Collapse
No announcement yet.

Object Access Failure

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Object Access Failure

    Hi,

    I am currently have a problem where the Security log on Windows 2003 SP1 machine is filling up with the following events:

    Object Open:
    Object Server: SC Manager
    Object Type: SC_MANAGER OBJECT
    Object Name: ServicesActive
    Handle ID: -
    Operation ID: {0,60509058}
    Process ID: 612
    Image File Name: C:\WINDOWS\system32\services.exe
    Primary User Name: SERVER$
    Primary Domain: DOMAINNAME
    Primary Logon ID: (0x0,0x3E7)
    Client User Name: username
    Client Domain: DOMAINNAME
    Client Logon ID: (0x0,0x39B4534)
    Accesses: READ_CONTROL
    Connect to service controller
    Enumerate services
    Query service database lock state

    Privileges: -
    Restricted Sid Count: 0
    Access Mask: 0x20015


    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


    This is happening to two users when they connect to SQL Server 2000 SP3 using Enterprise Manager.

    The users are System Administrtors on SQL but not Local OS Administrators.

    This only happens on Windows 2003 machines (and I beileve Service Pack 1)

    Cheers

    P

  • #2
    Event ID: 560

    Please review:

    http://www.kbalertz.com/kb_835398.aspx
    Best Regards,

    Yuval Sinay

    LinkedIn: https://www.linkedin.com/in/yuval14, Blog: http://blogs.microsoft.co.il/blogs/yuval14

    Comment


    • #3
      Thank You,

      That was very helpful, however I managed to resovle the problem by disabling the auditing on Object Access then forcing a Group Policy update from the server. I then reenabled the Object Access and again forced a Group Policy update. For some reason this stopped the messages from coming in.

      Strange but it worked.

      Thanks

      P

      Comment

      Working...
      X