Event submitted by Sahap
Event ID:
560
Source:
Security

Message:
Object Open: Object Server: Security Object Type: File Object Name: \Device\NetbiosSmb Handle ID: - Operation ID: {0,1502291133} Process ID: 1144 Image File Name: C:\WINDOWS\system32\svchost.exe Primary User Name: LOCAL SERVICE Primary Domain: NT AUTHORITY Primary Logon ID: (0x0,0x3E5) Client User Name: - Client Domain: - Client Logon ID: - Accesses: SYNCHRONIZE ReadData (or ListDirectory) WriteData (or AddFile) Privileges: - Restricted Sid Count: 0 Access Mask: 0x100003



System32 Reference



Solution by Sahap

2005-12-23 19:38:17 UTC

http://support.microsoft.com/kb/908473/en-us



User Information
 
Only an Email address is required for returning users.

Hide Name

Solution

Additional Links