Auditing problem

  • Thread starter Thread starter Russell
  • Start date Start date
R

Russell

Hello and thankyou in advance

I am running Win2K SP3.
The problem I am having is that someone has set audinting on "Object
access". The security logs fill up within a matter of minutes with the
following events:

Category: Object access
Event id: 560 and 562

It is all on the same computer and by either the Administrator or System.
I need to turn this off so any help would be appreciated.

Russell
 
Another information in the message must be the filename.
Find this file take its properties and in the security tab
Click on advanced then select the audit tab. And here
delete each line that is about administrators.

Jérôme
 
Back
Top