Event ID: 594

A handle to an object has been duplicated

A handle to an object has been duplicated:
    Source Handle ID:   %1
    Source Process ID:  %2
    Target Handle ID:   %3
    Target Process ID:  %4

Lookup Audit Policy Configuration Settings


  C:\> AuditPol.exe /get /category:"Detailed Tracking"

How to enable Windows Auditing

Recommended Audit Policy

Operating Systems:

Windows Server 2000 Windows 2003 Windows XP

Audit Category:

Detailed Tracking

LEFT/RIGHT arrow keys for navigation

Back to List