I am getting the following Failure Audit in my Security Log and I cannot find any resolution to it. Hoping someone on here has some insight: Event Origin Details: Date: 7/29/2009 Time: 7:55:59 AM Type: Failure Audit Username: PMG\computername$ Computer: PMGDC02 Source: Security Category: Directory Service Access Event ID: 566 Object Operation: Object Server: DS Operation Type: Object Access Object Type: computer Object Name: CN=computername,OU=####,OU=####,OU=####,DC=####,DC=com Handle ID: - Primary User Name: PMGDC02$ Primary Domain: PMG Primary Logon ID: (0x0,0x3E7) Client User Name: computername$ Client Domain: PMG Client Logon ID: (0x0,0x6B410B) Accesses: Write Property Properties: --- Public Information servicePrincipalName Access Mask: 0x20

Hello,what additional roles does the server have? Do you run Exchange servers in your environment? Or something with UNIX?Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

PMGDC02 is a DC and the "computername" is a regular workstation on the network. we do not run exchange. I am getting multiple failure audits with the same error for multiple workstations, not just one. All are events are the same as in the initial post.

Hello Jack, We already have on post talking about the same issue. "Since we are seeing "Failure Audit" for attribute UnixUserPassword, this attribute comes with services for UNIX. In Windows 2003 R2,there is slight change in this attribute compared to Windows 2003 SP1, the value of "searchflag" in windows 2003 for this attribute is 0 and in 2003R2 it is 128. Value 128 means it is confidential attribute can only be viewed by Domain Administrator or any user member of Administrators group" Please take a look in this post that will probably help you solve the problem; http://social.technet.microsoft.com/Forums/en-US/systemcenter/thread/8f1ba9a3-0143-4759-801e-331bdd0d3c7c Hope it Helps. []`s Thiago Pereira | http://thiagoinfrat.spaces.live.com | http://www.winsec.org

Already had the unixuserpassword issue. I resolved that with the tips I found. servicePrincipalName is a different attribute.