Click here to get back home

event log errors

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
event log errors <param 01-27-2006
---> Re: event log errors Roger Abell [MV...01-28-2006
Posted by <param on January 27, 2006, 3:08 pm
Please log in for more thread options
Hi all, I get a lot of the errors below daily on my main DC for a user named
lgdatacenter\moses. Any ideas what is causing this?

Object Open:

Object Server: SC Manager

Object Type: SERVICE OBJECT

Object Name: AudioSrv

Handle ID: -

Operation ID:

Process ID: 1232

Image File Name: C:\WINDOWS\system32\services.exe

Primary User Name: DC2$

Primary Domain: LGDATACENTER

Primary Logon ID: (0x0,0x3E7)

Client User Name: moses

Client Domain: LGDATACENTER

Client Logon ID: (0x0,0x167C9A9C)

Accesses: Query service configuration information

Query status of service


Privileges: -

Restricted Sid Count: 0

Access Mask: 0x5



For more information, see Help and Support Center at



TIA!



Posted by Roger Abell [MVP] on January 28, 2006, 5:59 am
Please log in for more thread options
Watch for processes running in that account context that might be
wanting to generate sound.

> Hi all, I get a lot of the errors below daily on my main DC for a user
> named lgdatacenter\moses. Any ideas what is causing this?
>
> Object Open:
>
> Object Server: SC Manager
>
> Object Type: SERVICE OBJECT
>
> Object Name: AudioSrv
>
> Handle ID: -
>
> Operation ID:
>
> Process ID: 1232
>
> Image File Name: C:\WINDOWS\system32\services.exe
>
> Primary User Name: DC2$
>
> Primary Domain: LGDATACENTER
>
> Primary Logon ID: (0x0,0x3E7)
>
> Client User Name: moses
>
> Client Domain: LGDATACENTER
>
> Client Logon ID: (0x0,0x167C9A9C)
>
> Accesses: Query service configuration information
>
> Query status of service
>
>
> Privileges: -
>
> Restricted Sid Count: 0
>
> Access Mask: 0x5
>
>
>
> For more information, see Help and Support Center at
>
>
>
> TIA!
>
>



Posted by <param on January 31, 2006, 10:47 am
Please log in for more thread options
I dont know what could be trying to access sound. I am also getting these
errors:-

Object Open:

Object Server: SC Manager

Object Type: SERVICE OBJECT

Object Name: AudioSrv

Handle ID: -

Operation ID:

Process ID: 1232

Image File Name: C:\WINDOWS\system32\services.exe

Primary User Name: DC2$

Primary Domain: LGDATACENTER

Primary Logon ID: (0x0,0x3E7)

Client User Name: moses

Client Domain: LGDATACENTER

Client Logon ID: (0x0,0x167C9A9C)

Accesses: Query service configuration information

Query status of service


Privileges: -

Restricted Sid Count: 0

Access Mask: 0x5



For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.



TIA!


> Watch for processes running in that account context that might be
> wanting to generate sound.
>
>> Hi all, I get a lot of the errors below daily on my main DC for a user
>> named lgdatacenter\moses. Any ideas what is causing this?
>>
>> Object Open:
>>
>> Object Server: SC Manager
>>
>> Object Type: SERVICE OBJECT
>>
>> Object Name: AudioSrv
>>
>> Handle ID: -
>>
>> Operation ID:
>>
>> Process ID: 1232
>>
>> Image File Name: C:\WINDOWS\system32\services.exe
>>
>> Primary User Name: DC2$
>>
>> Primary Domain: LGDATACENTER
>>
>> Primary Logon ID: (0x0,0x3E7)
>>
>> Client User Name: moses
>>
>> Client Domain: LGDATACENTER
>>
>> Client Logon ID: (0x0,0x167C9A9C)
>>
>> Accesses: Query service configuration information
>>
>> Query status of service
>>
>>
>> Privileges: -
>>
>> Restricted Sid Count: 0
>>
>> Access Mask: 0x5
>>
>>
>>
>> For more information, see Help and Support Center at
>>
>>
>>
>> TIA!
>>
>>
>
>



Posted by Roger Abell [MVP] on January 31, 2006, 9:11 pm
Please log in for more thread options
All that can be told to you is that some process, running in an account
context named "moses", apparently a domain account, is attempting to
get access from the services manager that would allow it to query the
Windows Audio service for its state, but "moses" is not allowed that.


>I dont know what could be trying to access sound. I am also getting these
>errors:-
>
> Object Open:
>
> Object Server: SC Manager
>
> Object Type: SERVICE OBJECT
>
> Object Name: AudioSrv
>
> Handle ID: -
>
> Operation ID:
>
> Process ID: 1232
>
> Image File Name: C:\WINDOWS\system32\services.exe
>
> Primary User Name: DC2$
>
> Primary Domain: LGDATACENTER
>
> Primary Logon ID: (0x0,0x3E7)
>
> Client User Name: moses
>
> Client Domain: LGDATACENTER
>
> Client Logon ID: (0x0,0x167C9A9C)
>
> Accesses: Query service configuration information
>
> Query status of service
>
>
> Privileges: -
>
> Restricted Sid Count: 0
>
> Access Mask: 0x5
>
>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
>
>
> TIA!
>
>
>> Watch for processes running in that account context that might be
>> wanting to generate sound.
>>
>>> Hi all, I get a lot of the errors below daily on my main DC for a user
>>> named lgdatacenter\moses. Any ideas what is causing this?
>>>
>>> Object Open:
>>>
>>> Object Server: SC Manager
>>>
>>> Object Type: SERVICE OBJECT
>>>
>>> Object Name: AudioSrv
>>>
>>> Handle ID: -
>>>
>>> Operation ID:
>>>
>>> Process ID: 1232
>>>
>>> Image File Name: C:\WINDOWS\system32\services.exe
>>>
>>> Primary User Name: DC2$
>>>
>>> Primary Domain: LGDATACENTER
>>>
>>> Primary Logon ID: (0x0,0x3E7)
>>>
>>> Client User Name: moses
>>>
>>> Client Domain: LGDATACENTER
>>>
>>> Client Logon ID: (0x0,0x167C9A9C)
>>>
>>> Accesses: Query service configuration information
>>>
>>> Query status of service
>>>
>>>
>>> Privileges: -
>>>
>>> Restricted Sid Count: 0
>>>
>>> Access Mask: 0x5
>>>
>>>
>>>
>>> For more information, see Help and Support Center at
>>>
>>>
>>>
>>> TIA!
>>>
>>>
>>
>>
>
>



Similar ThreadsPosted
continuing errors in event viewr June 2, 2006, 12:35 am
Multiple Event ID 529 Errors in Server 2003 April 10, 2006, 1:34 pm
Unable to resolve SPNEGO Event ID 40961 errors November 25, 2007, 12:54 pm
Administrator account disabled but still get "incorrect password" errors in Event log May 4, 2008, 2:11 pm
Administrator account disabled but still get "incorrect password" errors in Event log May 4, 2008, 2:12 pm
Errors! August 19, 2005, 12:57 pm
More Errors! August 22, 2005, 1:48 pm
LSASS errors July 22, 2005, 10:57 am
ca eventlog errors October 11, 2005, 8:13 am
Newly installed PKI - 2 errors June 14, 2005, 7:22 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap