Sign in with
Sign up | Sign in
Your question

Event ID 565

Last response: in Windows 2000/NT
Share
Anonymous
May 11, 2005 12:02:07 PM

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

After Installing exchange server I am getting event ID 565 whenever a user
tries to logon with the wrong password or username.

the Security log looks like this:



Type : Failure
User: (domain name)\(exchange server name)$
Computer: (domain controller name)
Source: Security
Category: Directory Service Access
Event ID: 565

Object Open:
Object Server: DS
Object Type: configuration
Object Name: CN=Configuration,DC=(Domain Name),DC=net
New Handle ID: -
Operation ID: {0,7592562}
Process ID: 280
Primary User Name: DCName$
Primary Domain: (Domain Name)
Primary Logon ID: (0x0,0x3E7)
Client User Name: EXCHSRV$
Client Domain: (Domain Name)
Client Logon ID: (0x0,0x73DA66)
Accesses Control Access

Privileges -

Properties:
READ_CONTROL
Create Child
Delete Child
List Contents
Write Self
Delete Tree
Manage Replication Topology


Thanks,

John

More about : event 565

Anonymous
May 11, 2005 4:46:11 PM

Archived from groups: microsoft.public.win2000.advanced_server (More info?)

On Wed, 11 May 2005 08:02:07 -0700, FA22ADMIN <FA22ADMIN@discussions.microsoft.com> wrote:

>After Installing exchange server I am getting event ID 565 whenever a user
>tries to logon with the wrong password or username.
>
>the Security log looks like this:
>
>
>
>Type : Failure
>User: (domain name)\(exchange server name)$
>Computer: (domain controller name)
>Source: Security
>Category: Directory Service Access
>Event ID: 565
>
>Object Open:
>Object Server: DS
>Object Type: configuration
>Object Name: CN=Configuration,DC=(Domain Name),DC=net
>New Handle ID: -
>Operation ID: {0,7592562}
>Process ID: 280
>Primary User Name: DCName$
>Primary Domain: (Domain Name)
>Primary Logon ID: (0x0,0x3E7)
>Client User Name: EXCHSRV$
>Client Domain: (Domain Name)
>Client Logon ID: (0x0,0x73DA66)
>Accesses Control Access
>
>Privileges -
>
>Properties:
>READ_CONTROL
>Create Child
>Delete Child
>List Contents
>Write Self
>Delete Tree
>Manage Replication Topology
>
>
>Thanks,
>
>John
>
The following Microsoft Knowledge Base articles deal with Exchange and Event ID 565:

http://support.microsoft.com?kbid=314294 "XADM: Exchange 2000 Error Messages Are Generated Because of SeSecurityPrivilege Right and Policytest Issues "
http://support.microsoft.com?kbid=331655 "Users Cannot Send Messages as a Public Folder After You Grant 'Send As' Permissions "
http://support.microsoft.com?kbid=813229 "XADM: Failure Audit Security Event ID Messages Are Logged When You Open a Mailbox That You Have Delegate Access To "
http://support.microsoft.com?kbid=828070 "Exchange Server Mailbox Store does not mount when the Mailbox Store database reaches the 16-GB limit "
!