Steven L Umbach
Guest
|
 Posted:
Tue Jan 04, 2005 7:01 am Post subject:
Re: Windows 2003 Event ID 684s |
|
|
According to the link below this is a normal informational event. ---
Steve
http://www.microsoft.com/technet/security/guidance/secmod128.mspx --- see
Event ID 684
684
The security descriptor of administrative group members was set.
Note: Every 60 minutes on a domain controller, a background thread
searches all members of administrative groups (such as domain, enterprise,
and schema administrators) and applies a fixed security descriptor on them.
This event is logged.
"CH" <isgroup@ucsd.edu> wrote in message
news:e7EwJcd8EHA.1292@TK2MSFTNGP10.phx.gbl...
| Quote: | Just upgraded domain/servers from W2K to W2K3 (native) and now receiving
Event ID 684 for each member of the Domain Admins group, every 60 minutes
on
one of the two DCs in the domain.
Anyone know how to prevent/fix this (other than turning off Auditing) ?
Thanks.
CH.
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in