failure audit
Results 1 to 3 of 3

Thread: failure audit

  1. #1
    Junior Member
    Join Date
    Jun 2002
    Posts
    15

    failure audit

    Hi I have been trouble shooting a program lagging real bad when I noticed a Whole Bunch of failure audits in the event viewer security logs in win xp. Here's where it gets interesting, the failure audit are occuring about 5 times a second, and it is still occuring. Now I did a netstat -ano and did not see any service accessing the network other than usual connection to the domain. I checked task manager and nothing is running other than normal system processes. I turned up nothing on a virus scan and zone alarm is not blocking anything at the moment. Does any one know what could be causing this and how to stop it?

  2. #2
    Just a Virtualized Geek MrLinus's Avatar
    Join Date
    Sep 2001
    Location
    Redondo Beach, CA
    Posts
    7,324
    Failure audits for what event?
    Goodbye, Mittens (1992-2008). My pillow will be cold without your purring beside my head
    Extra! Extra! Get your FREE copy of Insight Newsletter||MsMittens' HomePage

  3. #3
    Junior Member
    Join Date
    Jun 2002
    Posts
    15

    Fixed

    Okay I figured out the problem. I had auditing turned on in the local security policies, and for audit privilage use I had specified success,failure. Since the user was not an administrator it was logging a failure because I was viewing the event viewer and did not have permissions to do so. I turned audit privilage use to no auditing and it stopped filling up my event viewer with failure audits for privilage use.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides