|
Posted by =?Utf-8?B?WWk=?= on November 14, 2005, 10:58 am
If you were Registered and logged in, you could reply and use other advanced thread options
I have two nodes in a SQL Server cluster. I got many of the following events
on both servers. Any idea what is going on and how to fix it? I don't want
to just disable the auditing.
Thanks.
Event ID: 560
Source: Security
User: NT AUTHORITY\NETWORK SERVICE
Type: Audit Failure
Computer: ServerName
Category: Object Access
Object Open:
Object Server: SC Manager
Object Type: SERVICE OBJECT
Object Name: RemoteAccess
Handle ID: -
Operation ID:
Process ID: 724
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: ServerName$
Primary Domain: MyDomain
Primary Logon ID: (0x0,0x3E7)
Client User Name: NETWORK SERVICE
Client Domain: NT AUTHORITY
Client Logon ID: (0x0,0x3E4)
Accesses: Query status of service
Privileges: -
Restricted Sid Count: 0
Access Mask: 0x4
--
Yi
| 
XML site map