Solved

EventID 560

Posted on 2009-06-30
3
1,575 Views
Last Modified: 2012-05-07
I am having issues with accessing HP System Management Homepage. I can get in but everything isn't there. I have pinpointed something in the event log that appears everytime I try to log into it and it is EventID 560 that appears 8 times after every attempt. I am not sure how to correct this issue or what this Event exactly means. I have Domain Admin rights and have tried both locally and MS Terminal Services. Nothing seems to help. Any ideas?

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Object Access
Event ID:      560
Date:            6/30/2009
Time:            7:02:42 AM
User:            NT AUTHORITY\SYSTEM
Computer:      ARMCMDAW11
Description:
Object Open:
       Object Server:      Security
       Object Type:      Key
       Object Name:      \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
       Handle ID:      -
       Operation ID:      {0,16368409}
       Process ID:      4860
       Image File Name:      C:\WINDOWS\system32\wbem\wmiprvse.exe
       Primary User Name:      NETWORK SERVICE
       Primary Domain:      NT AUTHORITY
       Primary Logon ID:      (0x0,0x3E4)
       Client User Name:      ARMCMDAW11$
       Client Domain:      ARMCMD
       Client Logon ID:      (0x0,0x3E7)
       Accesses:      ACCESS_SYS_SEC
                  MAX_ALLOWED
                  
       Privileges:      -
       Restricted Sid Count:      0
       Access Mask:      0x3000000


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
Comment
Question by:RestlessSpirit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 13

Expert Comment

by:leegclystvale
ID: 24747026
Is this running via IIS?
0
 

Author Comment

by:RestlessSpirit
ID: 24747199
IIS is running on the machine. I don't see SNMP listed anywhere in it though.
0
 

Accepted Solution

by:
RestlessSpirit earned 0 total points
ID: 24782325
The problem was another SNMP program was shutting down windows.
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
A hard and fast method for reducing Active Directory Administrators members.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question