[Danny_Larouche]

I see several Error in Security event with ID 565 related to BES and its service account.

Here is a part of the error details.
--------

...
Properties:
DELETE
READ_CONTROL
Unknown specific access (bit 0)
Unknown specific access (bit 3)
Unknown specific access (bit 6)
...

----------------

What may cause this error? It look like the MAPI profile is using wrong password, but i did the IEMSTEST with success... Is there any parameter in privilige or something else that give this specific kind of error?

[kfarmer@cihi.ca]

Looks like i'm seeing the same errors on my exchange 2003 server - did you ever figure this out?
Thanks...


Object Open:
Object Server: Microsoft Exchange
Object Type: Microsoft Exchange Database
Object Name: /DC=ca/DC=****/CN=Configuration/CN=Services/CN=Microsoft Exchange/CN=****/CN=Administrative Groups/*******
Handle ID: 0
Operation ID: {0,97840268}
Process ID: 3004
Process Name: C:\Program Files\Exchsrvr\bin\store.exe
Primary User Name: *mailservername*$
Primary Domain: ****
Primary Logon ID: (0x0,0x3E7)
Client User Name: *blackberry service account userid*
Client Domain: ****
Client Logon ID: (0x0,0x443D35)
Accesses: Unknown specific access (bit 8)

Privileges: -

Properties:
---
%{a8df74ba-c5ea-11d1-bbcb-0080c76670c0}
%{d74a876f-22b9-11d3-aa62-00c04f8eedd8}
DELETE
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 4)
Unknown specific access (bit 5)
%{d74a8762-22b9-11d3-aa62-00c04f8eedd8}
DELETE
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 2)
Unknown specific access (bit 4)
Unknown specific access (bit 5)
%{d03a086e-afe6-11d2-aa04-00c04f8eedd8}
SYNCHRONIZE
Unknown specific access (bit 4)
Unknown specific access (bit 5)
%{cf899a6a-afe6-11d2-aa04-00c04f8eedd8}
WRITE_DAC
SYNCHRONIZE
Unknown specific access (bit 0)
Unknown specific access (bit 6)
%{cf4b9d46-afe6-11d2-aa04-00c04f8eedd8}
DELETE
WRITE_DAC
SYNCHRONIZE
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 4)
Unknown specific access (bit 5)
%{d74a8774-2289-11d3-aa62-00c04f8eedd8}
DELETE
WRITE_DAC
Unknown specific access (bit 3)
Unknown specific access (bit 4)
Unknown specific access (bit 5)
%{d0780592-afe6-11d2-aa04-00c04f8eedd8}
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{d74a8769-22b9-11d3-aa62-00c04f8eedd8}
DELETE
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 4)
Unknown specific access (bit 6)
%{cfc7978e-afe6-11d2-aa04-00c04f8eedd8}
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
SYNCHRONIZE
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 4)
Unknown specific access (bit 5)
%{cffe6da4-afe6-11d2-aa04-00c04f8eedd8}

Access Mask: 0

[BES admin]

seeing this on my exchange server as well. Anyone?

Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 565
Date: 11/16/2006
Time: 4:36:19 PM
User: Domain\BESAdministrator
Computer: Exchange Server
Description:
Object Open:
Object Server: Microsoft Exchange
Object Type: Microsoft Exchange Database
Object Name: /DC=com/DC=business/DC=domain/CN=Configuration/CN=Services/CN=Microsoft Exchange/CN=Exchange Mail/CN=Administrative Groups/CN=First Administrative Group/CN=Servers/CN=Server
Handle ID: 0
Operation ID: {0,967075417}
Process ID: 6224
Process Name: D:\Program Files\Exchsrvr\bin\store.exe
Primary User Name: BesAdministrator
Client Domain: Domain
Client Logon ID: (0x0,0x325F204B)
Accesses: Unknown specific access (bit 8)

Privileges: -

Properties:
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 4)
Unknown specific access (bit 5)
Unknown specific access (bit 7)
Unknown specific access (bit 10)
Unknown specific access (bit 11)
Unknown specific access (bit 14)
Unknown specific access (bit 15)
%{d74a876f-22b9-11d3-aa62-00c04f8eedd8}
---
%{a8df74ba-c5ea-11d1-bbcb-0080c76670c0}
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{d03a086e-afe6-11d2-aa04-00c04f8eedd8}
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 2)
Unknown specific access (bit 3)
Unknown specific access (bit 4)
Unknown specific access (bit 6)
%{d74a8769-22b9-11d3-aa62-00c04f8eedd8}
READ_CONTROL
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 3)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{d74a8774-2289-11d3-aa62-00c04f8eedd8}
READ_CONTROL
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 2)
Unknown specific access (bit 3)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{cffe6da4-afe6-11d2-aa04-00c04f8eedd8}
DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
Unknown specific access (bit 0)
Unknown specific access (bit 1)
Unknown specific access (bit 6)
%{d0780592-afe6-11d2-aa04-00c04f8eedd8}
DELETE
READ_CONTROL
SYNCHRONIZE
Unknown specific access (bit 1)
Unknown specific access (bit 4)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{cf899a6a-afe6-11d2-aa04-00c04f8eedd8}
WRITE_DAC
SYNCHRONIZE
Unknown specific access (bit 0)
Unknown specific access (bit 3)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{cf4b9d46-afe6-11d2-aa04-00c04f8eedd8}
WRITE_DAC
SYNCHRONIZE
Unknown specific access (bit 1)
Unknown specific access (bit 2)
Unknown specific access (bit 3)
Unknown specific access (bit 5)
Unknown specific access (bit 6)
%{cfc7978e-afe6-11d2-aa04-00c04f8eedd8}
%{d74a8762-22b9-11d3-aa62-00c04f8eedd8}

Access Mask: 0


For more information, see Help and Support Center at Events And Errors Message Center: Basic Search.

[fake_usa]

Bump, Im gettting the same thing,, anyone know what the issue is causing this? Everything seems to be working ok.