Back to your phpLogCon instanceEventlog Type: Security
Eventlog Source: Security
Event ID: 563
Link to KB Entry
Short Description:
An attempt was made to open an object with the intent to delete it. (This is used by file systems when the FILE_DELETE_ON_CLOSE flag is specified.)
KnowledgeBase Event Repository
This site is the central interface to the Adiscon Event Repository-
- Details for this entry
-
- Eventlog Type:
- Security
- Eventlog Source:
- Security
- Event ID:
- 563
- Full Description:
- An attempt was made to open an object with the intent to delete it. (This is used by file systems when the FILE_DELETE_ON_CLOSE flag is specified.)
- Parameter Description:
- Object Open for Delete:%n
%tObject Server:%t%1%n
%tObject Type:%t%2%n
%tObject Name:%t%3%n
%tNew Handle ID:%t%4%n
%tOperation ID:%t{%5,%6}%n
%tProcess ID:%t%7%n
%tPrimary User Name:%t%8%n
%tPrimary Domain:%t%9%n
%tPrimary Logon ID:%t%10%n
%tClient User Name:%t%11%n
%tClient Domain:%t%12%n
%tClient Logon ID:%t%13%n
%tAccesses%t%t%14%n
%tPrivileges%t%t%15%n
- More Informations:
- Cause
This event record indicates that an object has been opened with the intent to delete the object. The only way to determine what happened to the object is to look at the “Object Name” in the audit log. This message does not mean that the object was deleted. The log will show what action occurred. Note: There are security implications to this action if the object name represents a file containing sensitive data.
ResolutionIf the specified object name represents a file containing sensitive data, make sure the specified user was supposed to have access to the file.
- Search for this Event::
- Search in Knowledge Base • Search in this Forum • Search on Windows-Expert.com
-
- Software Vendor: Microsoft
- Accessed: 1096
Discuss the Event
Discussion for KB Entry 50 - Event ID 563
This is the discussion thread for the Knowledge Base Entry 50
Eventlog Type: Security
Eventlog Source: Security
Event ID: 563
Link to KB Entry
Short Description:
Eventlog Type: Security
Eventlog Source: Security
Event ID: 563
Link to KB Entry
Short Description:
-
knowledgebase - Frequent Poster
- Posts: 110
- Joined: Wed May 28, 2008 10:09 am
About the KnowledgeBase Event Repository
This is a repository of known Windows Events, hopefully together with a description of what it means, when it appears and how to troubleshoot it. The event repository was initially provided as a tool for parser creation but has since evolved. It is now part of the overall knowledgebase in the hope that it provides a useful service to the community. Please add your comments and questions (which we try to answer), as this increases the event repository usefulness for all of us.
