Failure Audit on Event Log

Hi, I have this error:

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 9/28/2007
Time: 10:28:52 AM
User: CAPACOMCY\kurdaneta
Computer: CAPACO-MCY
Description:
Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,101857905}
Process ID: 612
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: CAPACO-MCY$
Primary Domain: CAPACOMCY
Primary Logon ID: (0x0,0x3E7)
Client User Name: kurdaneta
Client Domain: CAPACOMCY
Client Logon ID: (0x0,0x6123337)
Accesses: READ_CONTROL
Connect to service controller
Enumerate services
Query service database lock state

Privileges: -
Restricted Sid Count: 0
Access Mask: 0x20015


For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

I have Windows 2003 Server and the all workstations have installed Windows
XP SP2; I need you help to resolve this error.

NOTE: But I include the account on Domain Admins group, this account don't
show me this error on event viewer, and then I out this account from Domain
Admin group the error show me againt.

Please let know.

Ludwin

http://www.eventid.net/display.asp?e...curity&phase=1

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

Ludwin Pacheco wrote:
> Hi, I have this error:
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Object Access
> Event ID: 560
> Date: 9/28/2007
> Time: 10:28:52 AM
> User: CAPACOMCY\kurdaneta
> Computer: CAPACO-MCY
> Description:
> Object Open:
> Object Server: SC Manager
> Object Type: SC_MANAGER OBJECT
> Object Name: ServicesActive
> Handle ID: -
> Operation ID: {0,101857905}
> Process ID: 612
> Image File Name: C:\WINDOWS\system32\services.exe
> Primary User Name: CAPACO-MCY$
> Primary Domain: CAPACOMCY
> Primary Logon ID: (0x0,0x3E7)
> Client User Name: kurdaneta
> Client Domain: CAPACOMCY
> Client Logon ID: (0x0,0x6123337)
> Accesses: READ_CONTROL
> Connect to service controller
> Enumerate services
> Query service database lock state
>
> Privileges: -
> Restricted Sid Count: 0
> Access Mask: 0x20015
>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> I have Windows 2003 Server and the all workstations have installed
> Windows XP SP2; I need you help to resolve this error.
>
> NOTE: But I include the account on Domain Admins group, this account
> don't show me this error on event viewer, and then I out this account
> from Domain Admin group the error show me againt.
>
> Please let know.

Hi this link don't help me my friend do you know other way?

"Gerry" wrote:

> Ludwin
>
> http://www.eventid.net/display.asp?e...curity&phase=1
>
> --
>
>
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
> Ludwin Pacheco wrote:
> > Hi, I have this error:
> >
> > Event Type: Failure Audit
> > Event Source: Security
> > Event Category: Object Access
> > Event ID: 560
> > Date: 9/28/2007
> > Time: 10:28:52 AM
> > User: CAPACOMCY\kurdaneta
> > Computer: CAPACO-MCY
> > Description:
> > Object Open:
> > Object Server: SC Manager
> > Object Type: SC_MANAGER OBJECT
> > Object Name: ServicesActive
> > Handle ID: -
> > Operation ID: {0,101857905}
> > Process ID: 612
> > Image File Name: C:\WINDOWS\system32\services.exe
> > Primary User Name: CAPACO-MCY$
> > Primary Domain: CAPACOMCY
> > Primary Logon ID: (0x0,0x3E7)
> > Client User Name: kurdaneta
> > Client Domain: CAPACOMCY
> > Client Logon ID: (0x0,0x6123337)
> > Accesses: READ_CONTROL
> > Connect to service controller
> > Enumerate services
> > Query service database lock state
> >
> > Privileges: -
> > Restricted Sid Count: 0
> > Access Mask: 0x20015
> >
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> > I have Windows 2003 Server and the all workstations have installed
> > Windows XP SP2; I need you help to resolve this error.
> >
> > NOTE: But I include the account on Domain Admins group, this account
> > don't show me this error on event viewer, and then I out this account
> > from Domain Admin group the error show me againt.
> >
> > Please let know.
>
>
>