Event ID 560 (SC_MANAGER OBJECT)

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I am getting this error message everytime the system boots up. How do I fix
this problem?

Source: Security
Event ID: 560
Category: Object Access
User: NT AUTHORITY\NETWORK SERVICE

Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,50957}
Process ID: 828
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: C9060931$
Primary Domain: RSP
Primary Logon ID: (0x0,0x3E7)
Client User Name: NETWORK SERVICE
Client Domain: NT AUTHORITY
Client Logon ID: (0x0,0x3E4)
Accesses: READ_CONTROL
Connect to service controller
Lock service database for exclusive access

Privileges: -
Restricted Sid Count: 0
 
Object access events can be somewhat obscure and I would not worry about it
if everything is working well. Unless you have a specific need to audit
object access such as to audit access to folders you may want to disable it
in Local Security Policy or the domain level policy that enforces it. By
default it is not enabled on XP.

Steve
 
I found the hotfix for it, Q910720.

Steven L Umbach said:
Object access events can be somewhat obscure and I would not worry about it
if everything is working well. Unless you have a specific need to audit
object access such as to audit access to folders you may want to disable it
in Local Security Policy or the domain level policy that enforces it. By
default it is not enabled on XP.

Steve
Click to expand...
 
Back
Top