I am getting this same security event from this server only, about every 20 minutes. Does anyone know what this is about.
Thanks
Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 565
Date: 3/10/2003
Time: 8:08:59 PM
User: SJC\WEREWOLF$
Computer: ULYSSES
Description:
Object Open:
Object Server: DS
Object Type: dnsNode
Object Name: DC=7.104,DC=16.172.in-addr.arpa,CN=MicrosoftDNS,CN=System,DC=sjc,DC=sjca,DC=edu
New Handle ID: -
Operation ID: {0,135079876}
Process ID: 284
Primary User Name: ULYSSES$
Primary Domain: SJC
Primary Logon ID: (0x0,0x3E7)
Client User Name: WEREWOLF$
Client Domain: SJC
Client Logon ID: (0x0,0x80D27B6)
Accesses Write Self
Privileges -
Properties:
Write Property
%{00000000-0000-0000-0000-000000000000}
---
dnsRecord
ACCESS_SYS_SEC
dNSTombstoned
Thanks
Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 565
Date: 3/10/2003
Time: 8:08:59 PM
User: SJC\WEREWOLF$
Computer: ULYSSES
Description:
Object Open:
Object Server: DS
Object Type: dnsNode
Object Name: DC=7.104,DC=16.172.in-addr.arpa,CN=MicrosoftDNS,CN=System,DC=sjc,DC=sjca,DC=edu
New Handle ID: -
Operation ID: {0,135079876}
Process ID: 284
Primary User Name: ULYSSES$
Primary Domain: SJC
Primary Logon ID: (0x0,0x3E7)
Client User Name: WEREWOLF$
Client Domain: SJC
Client Logon ID: (0x0,0x80D27B6)
Accesses Write Self
Privileges -
Properties:
Write Property
%{00000000-0000-0000-0000-000000000000}
---
dnsRecord
ACCESS_SYS_SEC
dNSTombstoned