Audit Failure 5145, but user is granted access and should be
I have a network share setup on a server. Users are able to store their files there...etc., etc. I'm getting a ton of 5145 events that say:
WinEvtLog: Security: AUDIT_FAILURE(5145):
Microsoft-Windows-Security-Auditing: (no user): no domain: computer.domain.org: A network share object was checked to see whether client can be granted desired access. Subject: Security
ID: S-1-5-21-1002586731-3452677436-764946651-1829 Account
Name:
username Account
Domain: domain Logon
ID: 0x34b6800f Network
Information: Object
Type: File Source
Address: 192.168.100.123 Source
Port: 51489 Share
Information: Share
Name: \\*\Home$ Share
Path: \??\E:\Home Relative
Target Name: username\user\filename.xls Access
Request Information: Access
Mask: 0x40080 Accesses: %%1539 %%4423 Access
Check Results: %%1539:
%%1805 %%4423:
%%1801 D:(A;;0x1301bf;;;AU)
However,
this user is not having any trouble opening these files and shouldn't be having trouble as they are in fact her files. I've made sure that it's her accessing these files, so I'm not worried about someone trying to access them who shouldn't be.
Any
suggestions? This is on a Windows Server 2008 R2 machine. It's in the same domain as the user is in, although we do have a trust to another domain set up (I've seen that mentioned in other posts related to this issue). It's even in the same
subnet. The user and both her laptop and the server are all in Active Directory and everything else seems to be working properly.
Thanks
in advance.
January 24th, 2011 9:58am
Having the same issue.... is it to do with a virus or something....please help
Free Windows Admin Tool Kit Click here and download it now
March 1st, 2011 1:52am