[logs] Re: [Windows] Privileges field in 560 events

From: Schneider, Robert (Robert.Schneider@private)
Date: Wed Aug 03 2005 - 12:29:14 PDT

A Windows 2000 Pro stand-alone (not connected to network) system has the
Security Event logs filling up with Event ID 560s!  100s are written with
the same time stamp. The user involved has restricted privileges. What can
cause so many 560 events to occur so quickly? 
Thanks in advance,
Bob Schneider 
L3 Communications/ILEX Systems 
IAVA Support 
732-530-8444 x3503 
mailto:robert.schneider@private <mailto:robert.schneider@private> 

LogAnalysis mailing list

This archive was generated by hypermail 2.1.3 : Wed Aug 03 2005 - 17:09:57 PDT