Windows Security Log Event ID 594
| Operating Systems |
Windows Server 2000
Windows 2003 and XP
|
|
Category | Process Tracking |
|
Type
|
Success
|
Corresponding events
in Windows
2008
and Vista |
4690
|
594: A handle to an object has been duplicated
On this page
This simply means that the program obtained another handle to an object (e.g. file) that it already had open under a different handle. This handle may be passed on to a child process but in any case it will have the same level of access as the handle the file was originally opened under. To determine what file is involved, find the accompanying event 560 for with a handle ID that matches this event's source handle ID.
Microsoft's comments:
Expected activity.
Free Security Log Resources by Randy
- Source Handle ID:
- Source Process ID:
- Target Handle ID:
- Target Process ID:
Supercharger Enterprise
Load Balancing for Windows Event Collection