Sign in with
Sign up | Sign in
Your question

Event ID 560 7 different errors

Last response: in Windows 2000/NT
Share
Anonymous
a b 8 Security
October 19, 2004 9:39:03 AM

Archived from groups: microsoft.public.win2000.security (More info?)

We have a file/print server that is getting hit by one user with event id 560
in the security log, but there are 7 different errors. We have looked at
everything we know to look at and we still can't figure it out. What should
we try now. Here is one of the 7.

Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\NetBT_Tcpip_{A44CE6C8-1F70-451F-ACC9-615FB4DB9DF9}
New Handle ID: -
Operation ID: {0,203929184}
Process ID: 2632
Primary User Name: ysi7740
Primary Domain: USE5
Primary Logon ID: (0x0,0xC26DD4A)
Client User Name: -
Client Domain: -
Client Logon ID: -
Accesses SYNCHRONIZE
ReadData (or ListDirectory)
WriteData (or AddFile)

Privileges -

More about : event 560 errors

Anonymous
a b 8 Security
October 19, 2004 8:52:14 PM

Archived from groups: microsoft.public.win2000.security (More info?)

Is the user experiencing any problems accessing resources? These are object
access errors which may mean the user does not have necessary permissions
for the file/folder being accessed. Start by checking this users share and
ntfs permissions compared to other users. Usually there is a 562 event
logged with the same timestamp that may give more info. --- Steve


"colemanj" <colemanj@discussions.microsoft.com> wrote in message
news:C9B2231F-894F-4F38-951E-33BA8D0945B8@microsoft.com...
> We have a file/print server that is getting hit by one user with event id
> 560
> in the security log, but there are 7 different errors. We have looked at
> everything we know to look at and we still can't figure it out. What
> should
> we try now. Here is one of the 7.
>
> Object Open:
> Object Server: Security
> Object Type: File
> Object Name: \Device\NetBT_Tcpip_{A44CE6C8-1F70-451F-ACC9-615FB4DB9DF9}
> New Handle ID: -
> Operation ID: {0,203929184}
> Process ID: 2632
> Primary User Name: ysi7740
> Primary Domain: USE5
> Primary Logon ID: (0x0,0xC26DD4A)
> Client User Name: -
> Client Domain: -
> Client Logon ID: -
> Accesses SYNCHRONIZE
> ReadData (or ListDirectory)
> WriteData (or AddFile)
>
> Privileges -
>
!