KB172509 - Explorer Erroneously Generates Event 560

SYMPTOMS

When you use Explorer to view directories and files, a Security Audit Failure Event 560 may be generated. A typical Security Event might be:

   8/5/97   8:11:45 PM  Security Failure Audit
   Object Access  560
   <USERNAME>
   <MACHINE NAME>
   Object Open:
      Object Server: Security
      Object Type:   File
      Object Name:   <FILE PATH\NAME>
      New Handle ID: -
      Operation ID:  {0,195446}
      Process ID: 2156888096
      Primary User Name:   <USERNAME>
      Primary Domain:   <DOMAIN NAME>
      Primary Logon ID: (0x0,0x2EA46)
      Client User Name: -
      Client Domain: -
      Client Logon ID:  -
      Accesses    SYNCHRONIZE
         ReadAttributes
         WriteAttributes

Explorer Erroneously Generates Event 560 - Write Failures

SYMPTOMS

CAUSE

WORKAROUND

STATUS