We have a windows 2003 domain with two domain controllers and we continue to get hundreds of event ID 566 failure audits in the security event log on our primary domain controller.
It seems like our exchange server (2003) is trying to access directory service objects in the Deleted Objects container, but I am not sure what the exchange server is trying to access or why.
I have run dcdiag against our primary domain controller and all the test pass without any errors.
Category: Directory Service Access
Object Server: DS
Operation Type: Object Access
Object Type: container
Object Name: CN=Deleted Objects,CN=Configuration,DC=MyDomain
Handle ID: -
Primary User Name: DomainController1$
Primary Domain: MYDOMAIN
Primary Logon ID: (0x0,0x3E7)
Client User Name: ExchangeSrvr$
Client Domain: MYDOMAIN
Client Logon ID: (0x0,0x22C042B4)
Accesses: Read Property
Default property set
Access Mask: 0x10
Any Ideas?? We recently implemented a log management solution and it is constantly capturing all these logs.