Solved

EventID 560

Posted on 2009-06-30
3
1,571 Views
Last Modified: 2012-05-07
I am having issues with accessing HP System Management Homepage. I can get in but everything isn't there. I have pinpointed something in the event log that appears everytime I try to log into it and it is EventID 560 that appears 8 times after every attempt. I am not sure how to correct this issue or what this Event exactly means. I have Domain Admin rights and have tried both locally and MS Terminal Services. Nothing seems to help. Any ideas?

Event Type:      Failure Audit
Event Source:      Security
Event Category:      Object Access
Event ID:      560
Date:            6/30/2009
Time:            7:02:42 AM
User:            NT AUTHORITY\SYSTEM
Computer:      ARMCMDAW11
Description:
Object Open:
       Object Server:      Security
       Object Type:      Key
       Object Name:      \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib
       Handle ID:      -
       Operation ID:      {0,16368409}
       Process ID:      4860
       Image File Name:      C:\WINDOWS\system32\wbem\wmiprvse.exe
       Primary User Name:      NETWORK SERVICE
       Primary Domain:      NT AUTHORITY
       Primary Logon ID:      (0x0,0x3E4)
       Client User Name:      ARMCMDAW11$
       Client Domain:      ARMCMD
       Client Logon ID:      (0x0,0x3E7)
       Accesses:      ACCESS_SYS_SEC
                  MAX_ALLOWED
                  
       Privileges:      -
       Restricted Sid Count:      0
       Access Mask:      0x3000000


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
0
Comment
Question by:RestlessSpirit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 13

Expert Comment

by:leegclystvale
ID: 24747026
Is this running via IIS?
0
 

Author Comment

by:RestlessSpirit
ID: 24747199
IIS is running on the machine. I don't see SNMP listed anywhere in it though.
0
 

Accepted Solution

by:
RestlessSpirit earned 0 total points
ID: 24782325
The problem was another SNMP program was shutting down windows.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question