Hallow
I have noticed that the following error logs are generated on the server where we have installed Kivi Syslog server v9.3.2. Operating system is Windows 2003 Server x32. As a database we use MS SQL 2008 R2
| Event Type: | Failure Audit |
| Event Source: | Security |
| Event Category: | Object Access |
| Event ID: | 560 |
| Date: | | 9/17/2012 |
| Time: | | 6:14:18 PM |
| User: | | NT AUTHORITY\NETWORK SERVICE |
| Computer: | KIWISERVER |
Description:
Object Open:
| | Object Server: | Security | |
| | Object Type: | Key | |
| | Object Name: | \REGISTRY\MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM | |
| | Handle ID: | - | |
| | Operation ID: | {0,1015230540} | |
| | Process ID: | 3724 | |
| | Image File Name: | C:\WINDOWS\system32\wbem\wmiprvse.exe | |
| | Primary User Name: | NETWORK SERVICE | |
| | Primary Domain: | NT AUTHORITY | |
| | Primary Logon ID: | (0x0,0x3E4) | |
| | Client User Name: | - | |
| | Client Domain: | - | |
| | Client Logon ID: | - | |
| | Accesses: | DELETE | |
| | | READ_CONTROL |
| | | WRITE_DAC |
| | | WRITE_OWNER |
| | | Query key value |
| | | Set key value |
| | | Create sub-key |
| | | Enumerate sub-keys |
| | | Notify about changes to keys |
| | | Create Link |
| | | |
| | Privileges: | - | |
| | Restricted Sid Count: | 0 | |
| | Access Mask: | 0xF003F | |
Could you please help me to understand what this error mean?
Thank you
