Event ID 565

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

After Installing exchange server I am getting event ID 565 whenever a user
tries to logon with the wrong password or username.

the Security log looks like this:


Type : Failure
User: (domain name)\(exchange server name)$
Computer: (domain controller name)
Source: Security
Category: Directory Service Access
Event ID: 565

Object Open:
Object Server: DS
Object Type: configuration
Object Name: CN=Configuration,DC=(Domain Name),DC=net
New Handle ID: -
Operation ID: {0,7592562}
Process ID: 280
Primary User Name: DCName$
Primary Domain: (Domain Name)
Primary Logon ID: (0x0,0x3E7)
Client User Name: EXCHSRV$
Client Domain: (Domain Name)
Client Logon ID: (0x0,0x73DA66)
Accesses Control Access

Privileges -

Properties:
READ_CONTROL
Create Child
Delete Child
List Contents
Write Self
Delete Tree
Manage Replication Topology


Thanks,

John
1 answer Last reply
More about event
  1. Archived from groups: microsoft.public.win2000.advanced_server (More info?)

    On Wed, 11 May 2005 08:02:07 -0700, FA22ADMIN <FA22ADMIN@discussions.microsoft.com> wrote:

    >After Installing exchange server I am getting event ID 565 whenever a user
    >tries to logon with the wrong password or username.
    >
    >the Security log looks like this:
    >
    >
    >
    >Type : Failure
    >User: (domain name)\(exchange server name)$
    >Computer: (domain controller name)
    >Source: Security
    >Category: Directory Service Access
    >Event ID: 565
    >
    >Object Open:
    >Object Server: DS
    >Object Type: configuration
    >Object Name: CN=Configuration,DC=(Domain Name),DC=net
    >New Handle ID: -
    >Operation ID: {0,7592562}
    >Process ID: 280
    >Primary User Name: DCName$
    >Primary Domain: (Domain Name)
    >Primary Logon ID: (0x0,0x3E7)
    >Client User Name: EXCHSRV$
    >Client Domain: (Domain Name)
    >Client Logon ID: (0x0,0x73DA66)
    >Accesses Control Access
    >
    >Privileges -
    >
    >Properties:
    >READ_CONTROL
    >Create Child
    >Delete Child
    >List Contents
    >Write Self
    >Delete Tree
    >Manage Replication Topology
    >
    >
    >Thanks,
    >
    >John
    >
    The following Microsoft Knowledge Base articles deal with Exchange and Event ID 565:

    http://support.microsoft.com?kbid=314294 "XADM: Exchange 2000 Error Messages Are Generated Because of SeSecurityPrivilege Right and Policytest Issues "
    http://support.microsoft.com?kbid=331655 "Users Cannot Send Messages as a Public Folder After You Grant 'Send As' Permissions "
    http://support.microsoft.com?kbid=813229 "XADM: Failure Audit Security Event ID Messages Are Logged When You Open a Mailbox That You Have Delegate Access To "
    http://support.microsoft.com?kbid=828070 "Exchange Server Mailbox Store does not mount when the Mailbox Store database reaches the 16-GB limit "
Ask a new question

Read More

Exchange Server Domain Name Event Id Windows