Event 565 repeating in excessoff 100's per... Expand / Collapse
Author
Message
Posted 7/22/2009 4:42:07 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 7/22/2009 10:08:57 AM
Posts: 1, Visits: 1
The following in our Event Log is repeating hundred times a second on our server;

Event Type: Success Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 565

This has only happened since using HP 6730s. All our other machines work correctly? and don't authenticate this many times?

any solutions or is this a common problem?
Post #140
Posted 7/24/2009 9:37:04 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
These are evidently domain controllers and you have enabled "Audit directory service access".  Turn that off unless you have specific reasons to turn it on - such as auditing changes to group policy objects or OU permissions.  See my free webinars like "Top 10 Active Directory Changes to Monitor in the Security Log".
Post #144
Posted 11/24/2009 5:08:47 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 11/24/2009 4:53:55 PM
Posts: 1, Visits: 0
Hello...I just built 2 new 2003 domain controllers and there were tons of 565 events be logged. I took the advice of this thread and changed the "Audit directory service access" = no auditing, but they are still being logged? I then changed all of the policies to = no audting just to run a test. Those 565's are still being logged.

Any suggestions?

ZT 

Post #278
Posted 11/25/2009 12:07:43 PM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
Where are you configuring your audit policy?  There's to GPOs by default in AD.  Default Domain Policy linked to the root of the domain.  Then Default Domain Controllers Policy linked to the Domain Controllers OU.  Domain controllers get their policy from the latter.
Post #279
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 7:59am