Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Anyone seen this before?
Anyone seen this before? [message #386880] Mon, 08 February 2010 12:51 Go to next message
NuGearz  is currently offline NuGearz
Messages: 5
Registered: October 2009
Junior Member
Object Operation:
Object Server: DS
Operation Type: Object Access
Object Type: computer
Object Name: CN=ServerNAME,OU=Citrix
Servers,OU=somewherenow,OU=Servers,DC=Somewhere,DC=ORG
Handle ID: -
Primary User Name: DomainController$
Primary Domain: Somewhere
Primary Logon ID: (0x0,0x3E7)
Client User Name: ServerNAME$
Client Domain: Somewhere
Client Logon ID: (0x0,0x1A395C34)
Accesses: Write Property

Properties:
---
Public Information
servicePrincipalName
computer

Additional Info:
Additional Info2:
Access Mask: 0x20
Re: Anyone seen this before? [message #386907 is a reply to message #386880] Mon, 08 February 2010 13:18 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

NuGearz schrieb:
> Object Operation:
> Object Server: DS
> Operation Type: Object Access
> Object Type: computer
> Object Name: CN=ServerNAME,OU=Citrix
> Servers,OU=somewherenow,OU=Servers,DC=Somewhere,DC=ORG
> Handle ID: -
> Primary User Name: DomainController$
> Primary Domain: Somewhere
> Primary Logon ID: (0x0,0x3E7)
> Client User Name: ServerNAME$
> Client Domain: Somewhere
> Client Logon ID: (0x0,0x1A395C34)
> Accesses: Write Property
>
> Properties:
> ---
> Public Information
> servicePrincipalName

It looks to me as if the Domain Controller would write the SPN of a
Terminal Server to the directory. Looks like a pretty normal operation.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.
Re: Anyone seen this before? [message #387412 is a reply to message #386907] Tue, 09 February 2010 03:51 Go to previous messageGo to next message
NuGearz  is currently offline NuGearz
Messages: 5
Registered: October 2009
Junior Member
Interesting thought, now the next question. Why is this failing? This
failure event occurs for other servers too that are not TS.

"Florian Frommherz [MVP]" wrote:

> Howdie!
>
> NuGearz schrieb:
> > Object Operation:
> > Object Server: DS
> > Operation Type: Object Access
> > Object Type: computer
> > Object Name: CN=ServerNAME,OU=Citrix
> > Servers,OU=somewherenow,OU=Servers,DC=Somewhere,DC=ORG
> > Handle ID: -
> > Primary User Name: DomainController$
> > Primary Domain: Somewhere
> > Primary Logon ID: (0x0,0x3E7)
> > Client User Name: ServerNAME$
> > Client Domain: Somewhere
> > Client Logon ID: (0x0,0x1A395C34)
> > Accesses: Write Property
> >
> > Properties:
> > ---
> > Public Information
> > servicePrincipalName
>
> It looks to me as if the Domain Controller would write the SPN of a
> Terminal Server to the directory. Looks like a pretty normal operation.
>
> Cheers,
> Florian
> --
> Microsoft MVP - Group Policy
> eMail: prename [at] frickelsoft [dot] net.
> blog: http://www.frickelsoft.net/blog.
> ANY advice you get on the Newsgroups should be tested thoroughly in your
> lab.
> .
>
Re: Anyone seen this before? [message #387423 is a reply to message #387412] Tue, 09 February 2010 04:30 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello NuGearz,

Failure? Please post the complete event log entry you have and describe what
happens before and what you are trying to achive. Your question is not easy
to follow without more information.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Interesting thought, now the next question. Why is this failing?
> This failure event occurs for other servers too that are not TS.
>
> "Florian Frommherz [MVP]" wrote:
>
>> Howdie!
>>
>> NuGearz schrieb:
>>
>>> Object Operation:
>>> Object Server: DS
>>> Operation Type: Object Access
>>> Object Type: computer
>>> Object Name: CN=ServerNAME,OU=Citrix
>>> Servers,OU=somewherenow,OU=Servers,DC=Somewhere,DC=ORG
>>> Handle ID: -
>>> Primary User Name: DomainController$
>>> Primary Domain: Somewhere
>>> Primary Logon ID: (0x0,0x3E7)
>>> Client User Name: ServerNAME$
>>> Client Domain: Somewhere
>>> Client Logon ID: (0x0,0x1A395C34)
>>> Accesses: Write Property
>>> Properties:
>>> ---
>>> Public Information
>>> servicePrincipalName
>> It looks to me as if the Domain Controller would write the SPN of a
>> Terminal Server to the directory. Looks like a pretty normal
>> operation.
>>
>> Cheers,
>> Florian
>> --
>> Microsoft MVP - Group Policy
>> eMail: prename [at] frickelsoft [dot] net.
>> blog: http://www.frickelsoft.net/blog.
>> ANY advice you get on the Newsgroups should be tested thoroughly in
>> your
>> lab.
>> .
Re: Anyone seen this before? [message #387742 is a reply to message #387412] Tue, 09 February 2010 11:13 Go to previous message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

NuGearz schrieb:
> Interesting thought, now the next question. Why is this failing? This
> failure event occurs for other servers too that are not TS.

As Meinolf stated, this doesn't necessarily need to be an error but just
an event that the DS threw because you told it to audit events like
this. You have enabled auditing at some place and this is one of the
events it just noted down. That's my guess from here.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.
Previous Topic:DC Question
Next Topic:Rename or Exchange Names
Goto Forum:
  


Current Time: Tue Jan 16 10:37:17 MST 2018

Total time taken to generate the page: 0.03905 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software