[logs] Re: [Windows] Privileges field in 560 events

Previous message: Moehrke, John (GE Healthcare): "[logs] Looking for toolkits and products that support RFC3195 -- COOKED"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Robert.Schneider@private

All,
A Windows 2000 Pro stand-alone (not connected to network) system has the
Security Event logs filling up with Event ID 560s!  100s are written with
the same time stamp. The user involved has restricted privileges. What can
cause so many 560 events to occur so quickly? 
Thanks in advance,
Bob

Bob Schneider 
L3 Communications/ILEX Systems 
IAVA Support 
732-530-8444 x3503 
mailto:robert.schneider@private <mailto:robert.schneider@private> 

_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis