BleepingComputer.com: A user with security issue

Jump to content

Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

A user with security issue this user has a problem with failure

#1 User is offline   bleepingnetwork 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 79
  • Joined: 07-August 08
  • Gender:Male
  • Location:Planet X

Posted 13 November 2008 - 03:07 AM

A user on my network repeatedly gets the following

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 11/13/2008
Time: 8:44:27 AM
User: (domain/username)
Computer: (computername)
Description:
Object Open:
Object Server: Security
Object Type: Key
Object Name: \REGISTRY\MACHINE\SOFTWARE\Microsoft\Tracing
Handle ID: -
Operation ID: {0,2883558}
Process ID: 1976
Image File Name: C:\Program Files\Internet Explorer\iexplore.exe
Primary User Name: (username)
Primary Domain: TERRADB
Primary Logon ID: (0x0,0x5CCC6)
Client User Name: -
Client Domain: -
Client Logon ID: -
Accesses: DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
Query key value
Set key value
Create sub-key
Enumerate sub-keys
Notify about changes to keys
Create Link

Privileges: -
Restricted Sid Count: 0


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

-----------------------------------------

Microsoft says to get a certian update, but the machine has it already. What can I do to fix this?

a little back ground information is that the system is a new build, and the user is new as well.

This post has been edited by bleepingnetwork: 13 November 2008 - 03:28 AM


#2 User is offline   Monty007 

  • Forum Addict
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Members
  • Posts: 1,150
  • Joined: 05-January 07
  • Gender:Male
  • Location:Australia

Posted 16 November 2008 - 05:45 PM

Hi, there is a fair bit of info about this event id. Here is the link put the id "560" in the id box. http://www.eventid.net/
MCP
MSDST

#3 User is offline   bleepingnetwork 

  • Member
  • PipPip
  • Find Topics
  • Group: Members
  • Posts: 79
  • Joined: 07-August 08
  • Gender:Male
  • Location:Planet X

Posted 16 December 2008 - 06:34 AM

The issue is due to Symantec client set to the wrong Parent Server

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users