locked
Security Event ID 560, 562, 567 success audit every 5 mins RRS feed

  • 問題

  • OS is XP

    I found the Security Event ID 560, 562, 567 success audit every 5 mins
    The event log over the size and make the user can't login the PC
    please advice,
    ThX
    2009年6月10日 上午 07:25

解答

  • Dear Customer,

     

    Based on my research, please follow the steps in Method 1 of KB 841001 and Disable the “Audit the access of global system objects” policy if it is currently Enabled. This policy setting is extremely chatty and in most cases this level of auditing is unnecessary.

    841001 Event IDs 560 and 562 appear many times in the security event log
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;841001

     

    If there are any concerns and questions on the above, please feel free to let me know.

    Sincerely


    Tom Zhang


    Tom Zhang – MSFT
    2009年6月10日 上午 10:28
    版主

所有回覆

  • Hi David

    The following URL maybe able to help you get around this problem.

    http://support.microsoft.com/kb/841001

    Please forgive me if I mis-understood your questions.

    Hope this can help.

    Chi
    2009年6月10日 上午 09:53
  • Dear Customer,

     

    Based on my research, please follow the steps in Method 1 of KB 841001 and Disable the “Audit the access of global system objects” policy if it is currently Enabled. This policy setting is extremely chatty and in most cases this level of auditing is unnecessary.

    841001 Event IDs 560 and 562 appear many times in the security event log
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;841001

     

    If there are any concerns and questions on the above, please feel free to let me know.

    Sincerely


    Tom Zhang


    Tom Zhang – MSFT
    2009年6月10日 上午 10:28
    版主
  • Hi All

    the Audit the access of global system objects have been disable
    And cannot run the adsiedit.msc

    The 560,562,and 567 auto generate per five mins

    Do you have another solution to fix it?

    Plz help
    2009年6月16日 上午 09:58