locked
Event ID 576 RRS feed

  • Question

  • I was checking my security audits an came across one  with the event ID 576
    I noticed there was no "User Name"or "Domain Name" is this normal
    Date: 21/05/2012 Source Security
    Time 12:01 pm Category: Privilege use
    Success A Event ID 576
    User Network Authority/Network Service
    Computer DEFAULT-HOME-EN
    Description
    Special privileges assigned to new logon 
    User Name:
    Domain:
    Login ID: (0X0,0X3E4)
    Privileges: SetAuditPrivilege
                        SeAssignPrimaryTokenPrivilege
                        SeChangeNotifyPrivilege    
    Thursday, May 31, 2012 4:14 AM

Answers

  • Hi rick_725,

    yes it is. btw the username is Network Service.

    Regards,

    Lutz

    • Proposed as answer by LutzMH Thursday, July 26, 2012 11:01 PM
    • Marked as answer by rick_725 Friday, July 27, 2012 4:47 AM
    Thursday, July 26, 2012 11:01 PM