|
<font color="blue">windows server 2003做完update重启后,发现打开outlook变得很慢,过一段时间会出来叫你重试的对话框,按下重试后过几分钟才能进outlook.察看服务器日志发现 failure audit 的日志如下所示</font><br>
<br>
Object Open:<br>Object Server: Microsoft Exchange<br>Object Type: Microsoft Exchange Database<br>Object Name: /O=Belkin Components/OU=Belkin China/cn=Configuration/cn=Servers/cn=TIBET/cn=Microsoft Private MDB<br>Handle ID: 0<br>Operation ID: {0,7559030}<br>Process ID: 2984<br>Process Name: D:\Program Files\Exchsrvr\bin\store.exe<br>Primary User Name: TIBET$<br>Primary Domain: BELKIN<br>Primary Logon ID: (0x0,0x3E7)<br>Client User Name: brians1<br>Client Domain: BELKIN<br>Client Logon ID: (0x0,0x733259)<br>Accesses: Unknown specific access (bit 8) <br>
<br>Privileges: -<br>
<br>Properties:<br>
---<br>
%{a8df74ba-c5ea-11d1-bbcb-0080c76670c0}<br>
DELETE <br>
SYNCHRONIZE <br>
Unknown specific access (bit 2) <br>
Unknown specific access (bit 4) <br>
Unknown specific access (bit 5) <br>
%{cf4b9d46-afe6-11d2-aa04-00c04f8eedd8}<br>
DELETE <br>
Unknown specific access (bit 0) <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 6) <br>
%{d74a8769-22b9-11d3-aa62-00c04f8eedd8}<br>
SYNCHRONIZE <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 2) <br>
Unknown specific access (bit 4) <br>
Unknown specific access (bit 6) <br>
%{d74a875e-22b9-11d3-aa62-00c04f8eedd8}<br>
WRITE_DAC <br>
WRITE_OWNER <br>
SYNCHRONIZE <br>
Unknown specific access (bit 0) <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 5) <br>
Unknown specific access (bit 6) <br>
%{cffe6da4-afe6-11d2-aa04-00c04f8eedd8}<br>
WRITE_DAC <br>
WRITE_OWNER <br>
SYNCHRONIZE <br>
Unknown specific access (bit 0) <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 4) <br>
Unknown specific access (bit 5) <br>
Unknown specific access (bit 6) <br>
%{d74a8762-22b9-11d3-aa62-00c04f8eedd8}<br>
DELETE <br>
Unknown specific access (bit 2) <br>
Unknown specific access (bit 6) <br>
%{cf899a6a-afe6-11d2-aa04-00c04f8eedd8}<br>
DELETE <br>
READ_CONTROL <br>
Unknown specific access (bit 0) <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 5) <br>
Unknown specific access (bit 6) <br>
%{d74a876f-22b9-11d3-aa62-00c04f8eedd8}<br>
READ_CONTROL <br>
WRITE_DAC <br>
WRITE_OWNER <br>
Unknown specific access (bit 0) <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 2) <br>
Unknown specific access (bit 3) <br>
Unknown specific access (bit 5) <br>
Unknown specific access (bit 6) <br>
%{d0780592-afe6-11d2-aa04-00c04f8eedd8}<br>
DELETE <br>
READ_CONTROL <br>
WRITE_DAC <br>
WRITE_OWNER <br>
Unknown specific access (bit 4) <br>
Unknown specific access (bit 5) <br>
Unknown specific access (bit 6) <br>
%{d03a086e-afe6-11d2-aa04-00c04f8eedd8}<br>
SYNCHRONIZE <br>
Unknown specific access (bit 0) <br>
Unknown specific access (bit 6) <br>
%{d74a8774-2289-11d3-aa62-00c04f8eedd8}<br>
WRITE_DAC <br>
SYNCHRONIZE <br>
Unknown specific access (bit 1) <br>
Unknown specific access (bit 2) <br>
Unknown specific access (bit 3) <br>
Unknown specific access (bit 5) <br>
Unknown specific access (bit 6) <br>
%{cfc7978e-afe6-11d2-aa04-00c04f8eedd8}<br>
<br>Access Mask: 0<br>
<br>
<br>
For more information, see Help and Support Center at <a target=_blank href=http://go.microsoft.com/fwlink/events.asp.>http://go.microsoft.com/fwlink/events.asp.</a><br>
<br>
<font color="blue">同一时间还有success audit的日志如下</font><br>
<br>
Object Open:<br>Object Server: Microsoft Exchange<br>Object Type: Microsoft Exchange Database<br>Object Name: /O=Belkin Components/OU=Belkin China/cn=Configuration/cn=Servers/cn=TIBET/cn=Microsoft Private MDB<br>Handle ID: 0<br>Operation ID: {0,7559029}<br>Process ID: 2984<br>Process Name: D:\Program Files\Exchsrvr\bin\store.exe<br>Primary User Name: TIBET$<br>Primary Domain: BELKIN<br>Primary Logon ID: (0x0,0x3E7)<br>Client User Name: brians1<br>Client Domain: BELKIN<br>Client Logon ID: (0x0,0x733259)<br>Accesses: -<br>Privileges: -<br>
<br>Properties:<br>
---<br>
%{a8df74ba-c5ea-11d1-bbcb-0080c76670c0}<br>
Unknown specific access (bit 8) <br>
%{d74a8766-22b9-11d3-aa62-00c04f8eedd8}<br>
%{cf0b3dc8-afe6-11d2-aa04-00c04f8eedd8}<br>
<br>Access Mask: 0<br>
<br>
<br>
For more information, see Help and Support Center at <a target=_blank href=http://go.microsoft.com/fwlink/events.asp.>http://go.microsoft.com/fwlink/events.asp.</a><br>
<br>
不知是什么问题,与update有关吗?之前并没发生这种情况 |
|