Event ID 561

Handle Allocated 

Handle Allocated: 
    Handle ID:    %1
    Operation ID: {%2,%3} 
    Process ID:   %4

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Object Access"
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows Server 2000 Windows 2003 Windows XP

Audit Category:
Object Access

LEFT/RIGHT arrow keys for navigation

Back to List