Event log: Failure audit privilege use event 577

[Yogesh]

Hi everybody,

For sometime my event logs for security show these log
messages
Type: Failure audit, Source: Security, Category:Privilege
use, Event:577, User:local system users

It looks like some program is trying to call privileged
service. The log shows it is happening 2-3 times every
minute. It fills up the log file quickly, as a result
users other than admin cannot log in. Is there a way to
figure out which process is attempting to do this or what
is causing this.

I will be glad if somebody can help.

Thanks.

[Graham Hughes]

try using your task manager to see what is running.

you don't say what programs you had open, if any!

It may well be a back web program, which is usually installed by your
computer manufacturer for new user help assistance plans and updates etc.

You would also benefit by getting "spybot" and/or "ad-aware"
while your there get a firewall from "zonealarm"


"Yogesh" > wrote in message
...
> Hi everybody,
>
> For sometime my event logs for security show these log
> messages
> Type: Failure audit, Source: Security, Category:Privilege
> use, Event:577, User:local system users
>
> It looks like some program is trying to call privileged
> service. The log shows it is happening 2-3 times every
> minute. It fills up the log file quickly, as a result
> users other than admin cannot log in. Is there a way to
> figure out which process is attempting to do this or what
> is causing this.
>
> I will be glad if somebody can help.
>
> Thanks.
>


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.497 / Virus Database: 296 - Release Date: 4/07/2003