Event ID 560 (SC_MANAGER OBJECT)

[aileen]

Whenever my computer boots up then I am getting the below error which I am desperately try to fix:

Source: Security
Event ID: 560
Category: Object Access
User: NT AUTHORITY\NETWORK SERVICE

Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,50957}
Process ID: 828
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: C9060931$
Primary Domain: RSP
Primary Logon ID: (0x0,0x3E7)
Client User Name: NETWORK SERVICE
Client Domain: NT AUTHORITY
Client Logon ID: (0x0,0x3E4)
Accesses: READ_CONTROL

Is there anyone who can help.

[jean]

I have seen that the objects access events are sometimes obscure and you dont have to worry about anything if every other thing is working fine without any issues. Incase if you want to audit a specific object access like similar to the audit access to folders, then you will have to disable it by going into the Local Security Policy or the domain level policy that usually enforces it.

[aileen]

There is a hotfix for this kind of problem called Q910720, that I have downloaded from this link - http://support.microsoft.com/kb/910720

[jean]

Glad that you had solved the issue and also thank you for reporting back. This will definitely help others who are facing similar type of problem.