Event Id578
SourceSecurity
DescriptionPrivileged object operation:
Object Server: %1
Object Handle: %2
Process ID: %3
Primary User Name: %4
Primary Domain: %5
Primary Logon ID: %6
Client User Name: %7
Client Domain: %8
Client Logon ID: %9
Privileges: %10
Event InformationAccording to Microsoft: "You can ignore these events because they are logged in error."
Reference LinksTake Ownership Remotely Does Not Log Security Event

Alternate Event ID in Vista and Windows Server 2008 is 4674.

Audit Failure Event 578 May Be Logged When You Save the Winmsd Report

Take Ownership Remotely Does Not Log Security Event

Event 578 May Be Logged During Logoff or Shutdown

Audit Failure Event 578 May Be Logged When You Save the Winmsd Report


  Did this information help you to resolve the problem?
  Yes: My problem was resolved.
  No: The information was not helpful / Partially helpful.
  Comments:

Captcha  Refresh