event 578

  • Thread starter Thread starter Rajiv Korpal
  • Start date Start date
R

Rajiv Korpal

Clear DayI do not know why I see my id in the eventviewer eventhough I am not logged on.


Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 578
Date: 11/28/2005
Time: 6:18:11 PM
User: S-1-5-21-8915387-1179330321-1947940980-4279
Computer: NYP-WEBPROD3-CJ
Description:
Privileged object operation:
Object Server: Security
Object Handle: 660
Process ID: 3138145380
Primary User Name: NYP-WEBPROD3-CJ$
Primary Domain: NYL-CORP
Primary Logon ID: (0x0,0x3E7)
Client User Name: t01bi17
Client Domain: NYL-CORP
Client Logon ID: (0x0,0x41DFEF)
Privileges: SeTakeOwnershipPrivilege

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 
Clear DayIs there a user named t01bi17 on your computer or in the domain as shown in Active Directory Users and Computers? The event seems to indicate that user t01bi17 used the user right to take ownership. --- Steve


I do not know why I see my id in the eventviewer eventhough I am not logged on.


Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 578
Date: 11/28/2005
Time: 6:18:11 PM
User: S-1-5-21-8915387-1179330321-1947940980-4279
Computer: NYP-WEBPROD3-CJ
Description:
Privileged object operation:
Object Server: Security
Object Handle: 660
Process ID: 3138145380
Primary User Name: NYP-WEBPROD3-CJ$
Primary Domain: NYL-CORP
Primary Logon ID: (0x0,0x3E7)
Client User Name: t01bi17
Client Domain: NYL-CORP
Client Logon ID: (0x0,0x41DFEF)
Privileges: SeTakeOwnershipPrivilege

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
 
Back
Top