| Event Id | 567 |
| Source | security |
| Description | Object Access Attempt:
Object Server: <Object Server>
Handle ID: <Handle ID>
Object Type: <Object Type>
Process ID: <Process ID>
Image File Name: <Image File Name>
Accesses: ReadData (or ListDirectory)
Access Mask: <Access Mask>
|
| Event Information | Explanation :
An object was accessed using a handle. This event is associated with the Security 560 event, which indicates that a handle was successfully created for the object. The Security 567 event is logged only when the corresponding Security 560 event indicates success.
The Handle ID is a unique number that is assigned by the operating system when a request is made to access an object. Multiple requests to access the same object may share a Handle ID. The Handle ID is valid for that object from the time that the Security 560 event is logged until the Security 562 event is logged.
User Action :
No user action is required. |
| Reference Links | Event ID 567 rom Source Security
Alternate Event ID in Vista and Windows Server 2008 is 4663.
|
