thistechguy
March 29th, 2008, 12:33 AM
THIS IS THE SECOND PART TO MY CRASHING ISSUE
I DONT KNOW WHAT SI GOING ON BUT I KEEP GETTING ALL THESE IN MY LOG FILE ALSO
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 3/28/2008
Time: 6:25:54 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: HELP
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: HELP
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 3/28/2008
Time: 6:25:54 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Owner
Source Workstation: HELP
Error Code: 0xC000006A
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 3/19/2008
Time: 11:02:52 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
DCOM got error "The service database is locked. " attempting to start the service winmgmt with arguments "" in order to run the server:
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
Event Type: Success Audit
Event Source: Security
Event Category: Policy Change
Event ID: 850
Date: 3/16/2008
Time: 8:41:33 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
A port was listed as an exception when the Windows Firewall started.
Policy origin: Local Policy
Profile used: Standard
Interface: All interfaces
Name: SSDP Component of UPnP Framework
Port number: 1900
Protocol: UDP
State: Enabled
Scope: Local subnet only
Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 576
Date: 3/16/2008
Time: 8:41:35 PM
User: HELP\Alan
Computer: HELP
Description:
Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0x24F98)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 3/16/2008
Time: 8:41:34 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Alan
Source Workstation: HELP
Error Code: 0x0
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date: 3/16/2008
Time: 8:41:34 PM
User: HELP\Alan
Computer: HELP
Description:
Successful Logon:
User Name: Alan
Domain: HELP
Logon ID: (0x0,0x24308)
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: HELP
Logon GUID: {00000000-0000-0000-0000-000000000000}
Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 576
Date: 3/16/2008
Time: 8:41:34 PM
User: HELP\Alan
Computer: HELP
Description:
Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0x24308)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 3/16/2008
Time: 8:41:34 PM
User: HELP\Alan
Computer: HELP
Description:
User Logoff:
User Name: Alan
Domain: HELP
Logon ID: (0x0,0x24308)
Logon Type: 2
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 3/26/2008
Time: 9:05:27 AM
User: HELP\Amber
Computer: HELP
Description:
The Remote Access Connection Manager service was successfully sent a start control.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/28/2008
Time: 6:25:48 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Barb registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 10:29:10 AM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Amber registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 11:19:17 AM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Amber registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 12:12:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Amber registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 8:56:35 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Alan registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/26/2008
Time: 5:49:40 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Barb registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/26/2008
Time: 5:20:34 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Alan registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
I DONT KNOW WHAT SI GOING ON BUT I KEEP GETTING ALL THESE IN MY LOG FILE ALSO
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 529
Date: 3/28/2008
Time: 6:25:54 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: Owner
Domain: HELP
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: HELP
Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 3/28/2008
Time: 6:25:54 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Owner
Source Workstation: HELP
Error Code: 0xC000006A
Event Type: Error
Event Source: DCOM
Event Category: None
Event ID: 10005
Date: 3/19/2008
Time: 11:02:52 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
DCOM got error "The service database is locked. " attempting to start the service winmgmt with arguments "" in order to run the server:
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
Event Type: Success Audit
Event Source: Security
Event Category: Policy Change
Event ID: 850
Date: 3/16/2008
Time: 8:41:33 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
A port was listed as an exception when the Windows Firewall started.
Policy origin: Local Policy
Profile used: Standard
Interface: All interfaces
Name: SSDP Component of UPnP Framework
Port number: 1900
Protocol: UDP
State: Enabled
Scope: Local subnet only
Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 576
Date: 3/16/2008
Time: 8:41:35 PM
User: HELP\Alan
Computer: HELP
Description:
Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0x24F98)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
Event Type: Success Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 3/16/2008
Time: 8:41:34 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: Alan
Source Workstation: HELP
Error Code: 0x0
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 528
Date: 3/16/2008
Time: 8:41:34 PM
User: HELP\Alan
Computer: HELP
Description:
Successful Logon:
User Name: Alan
Domain: HELP
Logon ID: (0x0,0x24308)
Logon Type: 2
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: HELP
Logon GUID: {00000000-0000-0000-0000-000000000000}
Event Type: Success Audit
Event Source: Security
Event Category: Privilege Use
Event ID: 576
Date: 3/16/2008
Time: 8:41:34 PM
User: HELP\Alan
Computer: HELP
Description:
Special privileges assigned to new logon:
User Name:
Domain:
Logon ID: (0x0,0x24308)
Privileges: SeChangeNotifyPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
Event Type: Success Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 538
Date: 3/16/2008
Time: 8:41:34 PM
User: HELP\Alan
Computer: HELP
Description:
User Logoff:
User Name: Alan
Domain: HELP
Logon ID: (0x0,0x24308)
Logon Type: 2
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
Date: 3/26/2008
Time: 9:05:27 AM
User: HELP\Amber
Computer: HELP
Description:
The Remote Access Connection Manager service was successfully sent a start control.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/28/2008
Time: 6:25:48 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Barb registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 10:29:10 AM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Amber registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 11:19:17 AM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Amber registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 12:12:41 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Amber registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/27/2008
Time: 8:56:35 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Alan registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/26/2008
Time: 5:49:40 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Barb registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.
Event Type: Warning
Event Source: Userenv
Event Category: None
Event ID: 1517
Date: 3/26/2008
Time: 5:20:34 PM
User: NT AUTHORITY\SYSTEM
Computer: HELP
Description:
Windows saved user HELP\Alan registry while an application or service was still using the registry during log off. The memory used by the user's registry has not been freed. The registry will be unloaded when it is no longer in use.
This is often caused by services running as a user account, try configuring the services to run in either the LocalService or NetworkService account.