Event log Error codes

  • Thread starter Thread starter anita.geogre
  • Start date Start date
A

anita.geogre

Lately we've turned on security and in out event log we
are getting unexplained evnets, error codes 577 and 560.

Can anyone tell me what these codes mean in English? What
was the user trying to do ?


Thanks,
Anita
 
Try posting them here. 560 is for object access to file/folder for some
reason and 577 means they or a service used a user right for a procedure.
Auditing of object access and privilige use will generate tons of events in
the security log and many will be very hard to make any sense of and many
are generated by the operating system instead of directly by a user. Often
event ID 560 is paired with another envent ID with the same timestamp that
may be helpful in determining what type of access was being done. The
following link may help.--- Steve

http://www.microsoft.com/technet/security/guidance/secmod144.mspx
 
Back
Top