Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

eventid 577 - NETWORK SERVICE - SeRestorePrivilege

Posted on 2009-04-07
4
Medium Priority
?
1,688 Views
Last Modified: 2012-05-06
Hello, I get event 577 in security log every second:
Privileged Service Called:
       Server:            Security
       Service:            -
       Primary User Name:      NETWORK SERVICE
       Primary Domain:      NT AUTHORITY
       Primary Logon ID:      (0x0,0x3E4)
       Client User Name:      -
       Client Domain:      -
       Client Logon ID:      -
       Privileges:      SeRestorePrivilege

Can you help me, how to find out, which process, or how could I eliminate this event?
Server runs IIS, win2003 OS...
Or any clue how to find out, what is the cause?
Thanks a lot
0
Comment
Question by:T-cko
4 Comments
 
LVL 32

Expert Comment

by:Kamran Arshad
ID: 24086323
Hi,

Please read the comments on the below site;

http://www.eventid.net/display.asp?eventid=577&source=
0
 

Author Comment

by:T-cko
ID: 24086744
Thanks, but I've been there already, helpless
0
 

Expert Comment

by:KarelK
ID: 24832348
Hi,
maybe you are using a startup/logon vbscript that causes this event.
0
 
LVL 1

Accepted Solution

by:
benner6807 earned 2000 total points
ID: 25027120
To get rid of that issue you should be able to go to the server that is giving the error and go to:

Administrative Tools --> Local Security Policy

once inside Local Security Policy go to:

Local Policies --> User Rights Assignment

then grant "Network Server" the 'Backup Files and Directories' user right.


that should stop that error from showing up.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We recently endured a series of broadcast storms that caused our ISP to shut us down for brief periods of time. After going through a multitude of tests, we determined that the issue was related to Intel NIC drivers on some new HP desktop computers …
An article on effective troubleshooting
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…

783 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question