Page:1/1
10/5/2005 11:35:35 AM
Object ownership changes
Description
Allows reporting on all collected events from the monitored systems.
For more information on various Windows events, go to :
http://www.microsoft.com/technet/support/eventserrors.mspx
Parameters
Database Servers
All
Computers
All
Accounts
All
Sources
Security
Categories
Object Access
IDs
560
Logs
Security
Types
Success Audit
Message Search Criteria
Include events with any of the message text keywords: SeTakeOwnershipPrivilege
Time Frame
Last 3 Week(s)
Start Date Time
2005-09-18 00:00:00
End Date Time
2005-10-09 00:00:00
Server
Date / Time
Id
Log
Type
Category
Source
Computer
Account
LOGCASTER SERVER
9/30/2005 2:07:37 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\Engineering
New Handle ID: 1008
Operation ID: {0,240816482}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xE5A3180)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC
ReadAttributes

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/21/2005 5:36:36 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\reports
New Handle ID: 1160
Operation ID: {0,201644958}
Process ID: 1544
Primary User Name: venkat
Primary Domain: SHARKS
Primary Logon ID: (0x0,0xC03A0C9)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xC03A0C9)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/21/2005 4:29:11 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
truger
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\Support\Patchworks Files\PW to UE Serial numbers\DEE28500
New Handle ID: 468
Operation ID: {0,201298550}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: truger
Client Domain: SHARKS
Client Logon ID: (0x0,0xBFB9C8C)
Accesses WRITE_DAC
WRITE_OWNER
ReadAttributes

Privileges SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/21/2005 9:07:19 AM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
truger
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\Support\AD6EE300
New Handle ID: 532
Operation ID: {0,199376745}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: truger
Client Domain: SHARKS
Client Logon ID: (0x0,0xBA23DA3)
Accesses WRITE_DAC
WRITE_OWNER
ReadAttributes

Privileges SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/20/2005 3:40:04 PM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\Support\Support Apps\HyperSnap\Shortcut to hsdx.exe.lnk
New Handle ID: 748
Operation ID: {0,195223206}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xBA20E9B)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC
ReadAttributes

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/20/2005 11:55:06 AM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\reports
New Handle ID: 1812
Operation ID: {0,194289111}
Process ID: 2004
Primary User Name: venkat
Primary Domain: SHARKS
Primary Logon ID: (0x0,0xB9166B8)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xB9166B8)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/20/2005 11:38:10 AM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\reports
New Handle ID: 1284
Operation ID: {0,194178356}
Process ID: 2004
Primary User Name: venkat
Primary Domain: SHARKS
Primary Logon ID: (0x0,0xB9166B8)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xB9166B8)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/20/2005 11:36:10 AM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\Reports
New Handle ID: 1080
Operation ID: {0,194068873}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xB910DC7)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC
ReadAttributes

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege
  
LOGCASTER SERVER
9/20/2005 11:34:41 AM
560
Security
Success Audit
Object Access
Security
RIPPLE_BACKUP
venkat
Object Open:
Object Server: Security
Object Type: File
Object Name: \Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume3\01-Shares\Reports
New Handle ID: 1124
Operation ID: {0,194059562}
Process ID: 8
Primary User Name: RIPPLE_BACKUP$
Primary Domain: SHARKS
Primary Logon ID: (0x0,0x3E7)
Client User Name: venkat
Client Domain: SHARKS
Client Logon ID: (0x0,0xB910DC7)
Accesses READ_CONTROL
WRITE_DAC
WRITE_OWNER
ACCESS_SYS_SEC
ReadAttributes

Privileges SeSecurityPrivilege
SeTakeOwnershipPrivilege