Dunno if this is correct but check out www.eventid.net This details that the event is generated by auditing "Object Open" activities. I assume RasPBFile means something to do with the RAS phone book file. Check on google groups as well - maybe someone else will have had the same error. Hope this helps a little D
-----Original Message----- From: Calhoun, Heath [mailto:[EMAIL PROTECTED]] Sent: 22 April 2002 20:49 To: [EMAIL PROTECTED] Subject: Windows Event 560 Hello. We are trying to figure out with no success the meaning of a Windows 2000 error when running the security audit. We are running sp2 with the latest hotfixes. The error is event 560: Security Event Log object access \baseNamedObjects\RasPbFile on reboot, it writes multiple entries. Thanks. Heath Calhoun
