Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Windows Server General Help » Audit fail event in the client server when starting perfmon remote
Audit fail event in the client server when starting perfmon remote [message #163626] Thu, 04 June 2009 06:16
Tommy Chan  is currently offline Tommy Chan
Messages: 1
Registered: June 2009
Junior Member
Dear All,

I have a centralized monitoring server to monitor a few client servers.
And there is a domain account is used for this purpose.

That means I have added the domain account to:
1) In the Performance Log Users local group of client servers
2) In the Administrators local group of the centralized monitoring server

After start the perfmon, I found that there are some failed audit events in
the client server:

Source: Security
Category: Object Access
Type: Failure Aduit
Event ID: 560

Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,349256720}
Process ID: 536
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: CLIENT01$
Primary Domain: Domain
Primary Logon ID: (0x0,0x3E7)
Client User Name: PerfmonDomainAccount
Client Domain: Domain
Client Logon ID: (0x0,0x14D136AC)
Accesses: READ_CONTROL
Connect to service controller
Enumerate services
Query service database lock state

Privileges: -
Restricted Sid Count: 0
Access Mask: 0x20015

Please help.

Regards,
Tommy Chan
Previous Topic:Windows 2008 Member Server
Next Topic:EARN MORE THAN 18000$ WITH CJ JOBS
Goto Forum:
  


Current Time: Sun Aug 20 19:08:27 EDT 2017

Total time taken to generate the page: 0.04098 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software