Event ID: 565

Object Open

Object Open:
    Object Server:      %1
    Object Type:        %2
    Object Name:        %3
    Handle ID:          %4
    Operation ID:       {%5,%6}
    Process ID:         %7
    Process Name:       %8
    Primary User Name:  %9
    Primary Domain:     %10
    Primary Logon ID:   %11
    Client User Name:   %12
    Client Domain:      %13
    Client Logon ID:    %14
    Accesses:           %15
    Privileges:         %16

    Properties:
        %17
    Access Mask:        %18


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Object Access"
How to enable Windows Auditing


Audit Category:
Object Access
Corresponding Events:
4661


LEFT/RIGHT arrow keys for navigation

Back to List