Event ID: 567

Object Access Attempt

Object Access Attempt:
    Object Server:     %1
    Handle ID:         %2
    Object Type:       %3
    Process ID:        %4
    Image File Name:   %5
    Accesses:          %6
    Access Mask:       %7
    Object Name:       %8
    Primary User Name: %9
    Primary Domain:    %10
    Primary Logon ID:  %11
    Client User Name:  %12
    Client Domain:     %13
    Client Logon ID:   %14

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Object Access"
How to enable Windows Auditing

Audit Category:
Object Access
Corresponding Events:
4657 4663

LEFT/RIGHT arrow keys for navigation

Back to List