EventID 4674 is generated either Success and... Expand / Collapse
Author
Message
Posted 11/17/2009 11:15:08 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 11/16/2009 11:57:24 PM
Posts: 2, Visits: 0
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 10/27/2009 9:53:50 PM
Event ID: 4674
Task Category: Sensitive Privilege Use
Level: Information
Keywords: Audit Failure
User: N/A
Computer: dc1.mydomain.local
Description:
An operation was attempted on a privileged object.

Subject:
Security ID: LOCAL SERVICE
Account Name: LOCAL SERVICE
Account Domain: NT AUTHORITY
Logon ID: 0x3e5

Object:
Object Server: Security
Object Type: -
Object Name: -
Object Handle: 0x0

Process Information:
Process ID: 0x238
Process Name: C:\Windows\System32\lsass.exe

Requested Operation:
Desired Access: 16777216
Privileges: SeSecurityPrivilege
Event Xml:



4674
0
0
13056
0
0x8010000000000000

55189


Security
dc1.mydomain.local



S-1-5-19
LOCAL SERVICE
NT AUTHORITY
0x3e5
Security
-
-
0x0
16777216
SeSecurityPrivilege
0x238
C:\Windows\System32\lsass.exe

Post #273
Posted 11/18/2009 9:25:21 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329, Visits: 0
I finally figured out the point of your post - next time try to be a little more explicit - you have found a failure example of this event.  Can you provide any information on what caused the event?
Post #275
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 8:01am