|
|
|
Forum Newbie
Group: Forum Members
Last Login: 11/16/2009 11:57:24 PM
Posts: 2,
Visits: 0
|
|
Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 10/27/2009 9:53:50 PM
Event ID: 4674
Task Category: Sensitive Privilege Use
Level: Information
Keywords: Audit Failure
User: N/A
Computer: dc1.mydomain.local
Description:
An operation was attempted on a privileged object.
Subject:
Security ID: LOCAL SERVICE
Account Name: LOCAL SERVICE
Account Domain: NT AUTHORITY
Logon ID: 0x3e5
Object:
Object Server: Security
Object Type: -
Object Name: -
Object Handle: 0x0
Process Information:
Process ID: 0x238
Process Name: C:\Windows\System32\lsass.exe
Requested Operation:
Desired Access: 16777216
Privileges: SeSecurityPrivilege
Event Xml:
4674
0
0
13056
0
0x8010000000000000
55189
Security
dc1.mydomain.local
S-1-5-19
LOCAL SERVICE
NT AUTHORITY
0x3e5
Security
-
-
0x0
16777216
SeSecurityPrivilege
0x238
C:\Windows\System32\lsass.exe
|
|
|
|
|
Expert
Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 329,
Visits: 0
|
|
| I finally figured out the point of your post - next time try to be a little more explicit - you have found a failure example of this event. Can you provide any information on what caused the event?
|
|
|
|