Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

Troubleshooting
Research
Professional Opinions
Ask a Question
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

troubleshooting Question

Domain Controller Security Failure Audit -Event ID 566

Avatar of zoosysop
zoosysop asked on
ExchangeWindows NetworkingMicrosoft Server Apps
4 Comments1 Solution1073 ViewsLast Modified:
We have a windows 2003 domain with two domain controllers and we continue to get hundreds of event ID 566 failure audits in the security event log on our primary domain controller.

It seems like our exchange server (2003) is trying to access directory service objects in the Deleted Objects container, but I am not sure what the exchange server is trying to access or why.

I have run dcdiag against our primary domain controller and all the test pass without any errors.

Source: Security

Category: Directory Service Access

Object Operation:
       Object Server:      DS
       Operation Type:      Object Access
       Object Type:      container
       Object Name:      CN=Deleted Objects,CN=Configuration,DC=MyDomain
       Handle ID:      -
       Primary User Name:      DomainController1$
       Primary Domain:      MYDOMAIN
       Primary Logon ID:      (0x0,0x3E7)
       Client User Name:      ExchangeSrvr$
       Client Domain:      MYDOMAIN
       Client Logon ID:      (0x0,0x22C042B4)
       Accesses:      Read Property
                  
       Properties:
      ---
            Default property set
                  uSNChanged
            Public Information
                  objectClass
      container

       Additional Info:      
       Additional Info2:      
       Access Mask:      0x10


Any Ideas??  We recently implemented a log management solution and it is constantly capturing all these logs.
ASKER CERTIFIED SOLUTION
Avatar of zoosysop
zoosysop

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Commented:
This problem has been solved!
Unlock 1 Answer and 4 Comments.
See Answers