Exchange Server Forums

failure audit every minute

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Server Security >> failure audit every minute

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

failure audit every minute - 1.Dec.2003 4:23:00 PM

jmatt001

Posts: 1
Joined: 1.Dec.2003
From: USA
Status: offline

I have the following failure audit posted in our security event log every minute after adding Exchange 2003 to our domain:

Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 565
Date: 11/25/2003
Time: 8:12:15 AM
User: NSI\NSI-EXCHANGE$
Computer: NSISERV
Description:
Object Open:
Object Server: DS
Object Type: configuration
Object Name: CN=Configuration,DC=nsi,DC=local
New Handle ID: -
Operation ID: {0,54801911}
Process ID: 296
Primary User Name: NSISERV$
Primary Domain: NSI
Primary Logon ID: (0x0,0x3E7)
Client User Name: NSI-EXCHANGE$
Client Domain: NSI
Client Logon ID: (0x0,0x36D88)
Accesses Control Access

Privileges -

Properties:
DELETE
READ_CONTROL
WRITE_OWNER
ACCESS_SYS_SEC
MAX_ALLOWED
%%7691
%%7692
%%7693
Manage Replication Topology

Cannot find anything matching on Microsoft KB. Any ideas?

Thank you!
Jonathan