You are probaly getting these events becuase you have your security policy set to audit object access. It sounds like your policy is set to audit on a failure access attempt. The error is probably related to a service trying to start or some other installed software.
For a nice listing of event ID's and their meanings, check out http://www.eventid.net/events.asp and click on the number of the event that you're looking for. -----Original Message----- From: Calhoun, Heath [mailto:[EMAIL PROTECTED]] Sent: Monday, April 22, 2002 3:49 PM To: [EMAIL PROTECTED] Subject: Windows Event 560 Hello. We are trying to figure out with no success the meaning of a Windows 2000 error when running the security audit. We are running sp2 with the latest hotfixes. The error is event 560: Security Event Log object access \baseNamedObjects\RasPbFile on reboot, it writes multiple entries. Thanks. Heath Calhoun
