Welcome to ServerForumz.com!
FAQFAQ    SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log inLog in

Event ID 577 Filing Security Logs

 
   Windows Server (Home) -> Windows Server Security RSS
Next:  ipsec SA with manual keys  
Author Message
Rob

External


Since: Oct 21, 2004
Posts: 158



(Msg. 1) Posted: Wed Jul 19, 2006 7:45 am
Post subject: Event ID 577 Filing Security Logs
Archived from groups: microsoft>public>windows>server>security (more info?)

I am having a problem with event id 577 events, in particular failure for
security privledges being generated that fill the event log within seconds. I
have auditing of privledge use set for success and failure. From what i have
read it seems that every RPC to a file server generates a failure event in
the security log. We have tried to add users groups to allow the right (
under user rights assignment) for priority scheduling and that did not work.
The only suggestion that i have read that seems to work is turning off
auditing of failures for privledge use - something our security policy
forbids. Does anyone know a way to stop these events without turing off the
auditing?
--
Rob

 >> Stay informed about: Event ID 577 Filing Security Logs 
Back to top
Login to vote
Roger Abell [MVP]

External


Since: May 04, 2004
Posts: 559



(Msg. 2) Posted: Wed Jul 19, 2006 9:20 pm
Post subject: Re: Event ID 577 Filing Security Logs [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Perhaps if you were to post about what privilege is not being granted and
so triggering the events. I do not normally experience what you mention
when auditing failure is enabled for privilege use.

"Rob" wrote in message

>I am having a problem with event id 577 events, in particular failure for
> security privledges being generated that fill the event log within
> seconds. I
> have auditing of privledge use set for success and failure. From what i
> have
> read it seems that every RPC to a file server generates a failure event in
> the security log. We have tried to add users groups to allow the right (
> under user rights assignment) for priority scheduling and that did not
> work.
> The only suggestion that i have read that seems to work is turning off
> auditing of failures for privledge use - something our security policy
> forbids. Does anyone know a way to stop these events without turing off
> the
> auditing?
> --
> Rob

 >> Stay informed about: Event ID 577 Filing Security Logs 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Security Event Logs - I have had to read some old NT4 EVT logs and noticed a lot of 528 Logons followed in about 2-3 minutes by a 538 logoff... This appears to be fairly consistant over several hundred pairs for most individuals... Question: Are there any other way for a....

security event logs in DC as well ? SOS - hello there I am shipping all the security and application event log from servers to a log agregation tool and i see some duplication of events from both the domain controlers and the normal machines. I am wondering if I even should ship the security....

Security logs - I seem to have a weird problem. Our Win2K DC servers seem to have delayed security logs. The security logs always seem to be about 5-7 days behind. All the other logs appear to be near realtime, however the security logs are always so far behind that....

security logs - Where is some good information on the various event ids within the security log? Presently I'm taking the MCSE 70-290, and it briefly mentions the security log and filter, etc in the MS official Academic Curricula. We have initiated some auditing..

Security Logs - A while back I post a message about security logs being delayed by 1-5 days. Every day I would look at security logs on our servers and notice that none of them were current they would always be behind by a day or more. To be honest I was stumped at..
   Windows Server (Home) -> Windows Server Security All times are: Pacific Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]