[prev in list] [next in list] [prev in thread] [next in thread] 

List:       focus-ms
Subject:    MS Exchange2K security failure event 565
From:       Robin Nicholson <rnicholson () mdtglobal ! com>
Date:       2001-10-27 14:20:44
[Download RAW message or body]


This is a new failure event for me that has shown up on an MS Exchange
2000 server.
I couldn't find adequate info at the microsoft site to explain what's
going on.

The error showed up after a denial of service error that required
rerunning Exchange setup with the /domainprep option.
The 2 usernames I get the error with have administrative control over a
specific organizational unit.

Has anyone seen this before? Can someone guide me in researching the
meaning of this event?



Robin Nicholson



------------------------------
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 565
Date:  10/25/2001
Time:  8:39:42 AM
User:  DOMAINNAME\USERNAME
Computer: COMPUTERNAME
Description:
Object Open:
  Object Server: Microsoft Exchange
  Object Type: Microsoft Exchange Logon
  Object Name: /o=Magnetic Data/ou=First Administrative
Group/cn=Recipients/cn=USERNAME
  New Handle ID: -
  Operation ID: {0,7604779}
  Process ID: 2264
  Primary User Name: COMPUTERNAME$
  Primary Domain: DOMAINNAME
  Primary Logon ID: (0x0,0x3E7)
  Client User Name: USERNAME
  Client Domain: USERNAME
  Client Logon ID: (0x0,0x730023)
  Accesses  Unknown specific access (bit 8)

  Privileges  -

 Properties:
Unknown specific access (bit 1)
Unknown specific access (bit 4)
  Send As



["smime.p7s" (application/x-pkcs7-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]