Security Failure - Is it a Concern???

Hi all

Below is an error that I have been getting in my Security
log and it appears for several machines when they log
on. Is it something to be worried about??

Event Type: Failure Audit
Event Source: Security
Event Category: Directory Service Access
Event ID: 565
Date: 09/06/2004
Time: 15:00:06
User: COMP\COMP14$
Computer: COMPSERVER
Description:
Object Open:
Object Server: DS
Object Type: computer
Object Name:
CN=COMP14,CN=Computers,DC=comp,DC=internal
New Handle ID: -
Operation ID: {0,123849695}
Process ID: 284
Primary User Name: COMPSERVER$
Primary Domain: COMP
Primary Logon ID: (0x0,0x3E7)
Client User Name: COMP14$
Client Domain: COMP
Client Logon ID: (0x0,0x761CBB5)
Accesses Write Property

Privileges -

Properties:
Create Child
Control Access
Public Information
servicePrincipalName


Thanks for your help

Mark

Henry
Mon Jun 14 04:03:28 CDT 2004

See Event ID for details on this:
http://www.eventid.net/display.asp?eventid=565&eventno=128&source=Security&phase=1


--
Henry Craven {SBS-MVP}
Melbourne Australia


"Mark" <anonymous@discussions.microsoft.com> wrote in message
news:1bf8001c451e2$a4b0b780$a101280a@phx.gbl...
> Hi all
>
> Below is an error that I have been getting in my Security
> log and it appears for several machines when they log
> on. Is it something to be worried about??
>
> Event Type: Failure Audit
> Event Source: Security
> Event Category: Directory Service Access
> Event ID: 565
> Date: 09/06/2004
> Time: 15:00:06
> User: COMP\COMP14$
> Computer: COMPSERVER
> Description:
> Object Open:
> Object Server: DS
> Object Type: computer
> Object Name:
> CN=COMP14,CN=Computers,DC=comp,DC=internal
> New Handle ID: -
> Operation ID: {0,123849695}
> Process ID: 284
> Primary User Name: COMPSERVER$
> Primary Domain: COMP
> Primary Logon ID: (0x0,0x3E7)
> Client User Name: COMP14$
> Client Domain: COMP
> Client Logon ID: (0x0,0x761CBB5)
> Accesses Write Property
>
> Privileges -
>
> Properties:
> Create Child
> Control Access
> Public Information
> servicePrincipalName
>
>
> Thanks for your help
>
> Mark

Mark
Mon Jun 14 05:04:37 CDT 2004

It appears that the DNS records are not updating on the
SBS machine. The particular machine I am looking at has
an ip of .71 and in DNS, the record for that machine has
an IP of .59. I have manually changed it but I still get
the error! It's related to the machine and not the user
log on.
I have checked the refresh interval on the DNS server and
it appears correct and there are no error messages for
DNS.

Any more suggestions??

thanks

Mark
>-----Original Message-----
>See Event ID for details on this:
>http://www.eventid.net/display.asp?
eventid=565&eventno=128&source=Security&phase=1
>
>
>--
>Henry Craven {SBS-MVP}
> Melbourne Australia
>
>
>"Mark" <anonymous@discussions.microsoft.com> wrote in
message
>news:1bf8001c451e2$a4b0b780$a101280a@phx.gbl...
>> Hi all
>>
>> Below is an error that I have been getting in my
Security
>> log and it appears for several machines when they log
>> on. Is it something to be worried about??
>>
>> Event Type: Failure Audit
>> Event Source: Security
>> Event Category: Directory Service Access
>> Event ID: 565
>> Date: 09/06/2004
>> Time: 15:00:06
>> User: COMP\COMP14$
>> Computer: COMPSERVER
>> Description:
>> Object Open:
>> Object Server: DS
>> Object Type: computer
>> Object Name:
>> CN=COMP14,CN=Computers,DC=comp,DC=internal
>> New Handle ID: -
>> Operation ID: {0,123849695}
>> Process ID: 284
>> Primary User Name: COMPSERVER$
>> Primary Domain: COMP
>> Primary Logon ID: (0x0,0x3E7)
>> Client User Name: COMP14$
>> Client Domain: COMP
>> Client Logon ID: (0x0,0x761CBB5)
>> Accesses Write Property
>>
>> Privileges -
>>
>> Properties:
>> Create Child
>> Control Access
>> Public Information
>> servicePrincipalName
>>
>>
>> Thanks for your help
>>
>> Mark
>
>
>.
>

Henry
Mon Jun 14 05:20:17 CDT 2004

Is the Client configured to get DNS from the SBServer Internal IP
Address ?

--
Henry Craven. {SBS-MVP}
=====================================
For the fastest response Post to the appropriate News
Group with as much detail of the Problem Space, Error
Message and Environment as possible:

News Server : news.microsoft.com
SBS 4/4.5 : microsoft.public.backoffice.smallbiz
SBS 2000 : microsoft.public.backoffice.smallbiz2000
SBS 2003 : microsoft.public.windows.server.sbs
=====================================


"Mark" <anonymous@discussions.microsoft.com> wrote in message
news:1c04701c451f7$000becd0$a101280a@phx.gbl...
> It appears that the DNS records are not updating on the
> SBS machine. The particular machine I am looking at has
> an ip of .71 and in DNS, the record for that machine has
> an IP of .59. I have manually changed it but I still get
> the error! It's related to the machine and not the user
> log on.
> I have checked the refresh interval on the DNS server and
> it appears correct and there are no error messages for
> DNS.
>
> Any more suggestions??
>
> thanks

Mark
Mon Jun 14 06:02:16 CDT 2004

I assume so but how do i check?

sorry for my stupidness!!


>-----Original Message-----
>Is the Client configured to get DNS from the SBServer
Internal IP
>Address ?
>
>--
>Henry Craven. {SBS-MVP}
>=====================================
>For the fastest response Post to the appropriate News
>Group with as much detail of the Problem Space, Error
>Message and Environment as possible:
>
>News Server : news.microsoft.com
>SBS 4/4.5 : microsoft.public.backoffice.smallbiz
>SBS 2000 : microsoft.public.backoffice.smallbiz2000
>SBS 2003 : microsoft.public.windows.server.sbs
>=====================================
>
>
>"Mark" <anonymous@discussions.microsoft.com> wrote in
message
>news:1c04701c451f7$000becd0$a101280a@phx.gbl...
>> It appears that the DNS records are not updating on the
>> SBS machine. The particular machine I am looking at
has
>> an ip of .71 and in DNS, the record for that machine
has
>> an IP of .59. I have manually changed it but I still
get
>> the error! It's related to the machine and not the
user
>> log on.
>> I have checked the refresh interval on the DNS server
and
>> it appears correct and there are no error messages for
>> DNS.
>>
>> Any more suggestions??
>>
>> thanks
>
>
>.
>

JoeM
Mon Jun 14 11:58:14 CDT 2004

A coupole of ways:

Open command (or cmd) window on client and enter the command "ipconfig
/all". One of the response lines will show the DNS server(s) IP address(es).

Another way on XP. Get to the connection status page for the client network
connection. Go to the support tab and click the details button.

Joe M

"Mark" <anonymous@discussions.microsoft.com> wrote in message
news:1bfd601c451ff$0da453c0$a501280a@phx.gbl...
> I assume so but how do i check?
>
> sorry for my stupidness!!
>
>
> >-----Original Message-----
> >Is the Client configured to get DNS from the SBServer
> Internal IP
> >Address ?
> >
> >--
> >Henry Craven. {SBS-MVP}
> >=====================================
> >For the fastest response Post to the appropriate News
> >Group with as much detail of the Problem Space, Error
> >Message and Environment as possible:
> >
> >News Server : news.microsoft.com
> >SBS 4/4.5 : microsoft.public.backoffice.smallbiz
> >SBS 2000 : microsoft.public.backoffice.smallbiz2000
> >SBS 2003 : microsoft.public.windows.server.sbs
> >=====================================
> >
> >
> >"Mark" <anonymous@discussions.microsoft.com> wrote in
> message
> >news:1c04701c451f7$000becd0$a101280a@phx.gbl...
> >> It appears that the DNS records are not updating on the
> >> SBS machine. The particular machine I am looking at
> has
> >> an ip of .71 and in DNS, the record for that machine
> has
> >> an IP of .59. I have manually changed it but I still
> get
> >> the error! It's related to the machine and not the
> user
> >> log on.
> >> I have checked the refresh interval on the DNS server
> and
> >> it appears correct and there are no error messages for
> >> DNS.
> >>
> >> Any more suggestions??
> >>
> >> thanks
> >
> >
> >.
> >