|
Posted by Roger Abell [MVP] on July 20, 2006, 12:20 am
Please log in for more thread options
Perhaps if you were to post about what privilege is not being granted and
so triggering the events. I do not normally experience what you mention
when auditing failure is enabled for privilege use.
>I am having a problem with event id 577 events, in particular failure for
> security privledges being generated that fill the event log within
> seconds. I
> have auditing of privledge use set for success and failure. From what i
> have
> read it seems that every RPC to a file server generates a failure event in
> the security log. We have tried to add users groups to allow the right (
> under user rights assignment) for priority scheduling and that did not
> work.
> The only suggestion that i have read that seems to work is turning off
> auditing of failures for privledge use - something our security policy
> forbids. Does anyone know a way to stop these events without turing off
> the
> auditing?
> --
> Rob
|