Microsoft KB Archive/311258

= SMS: Collection Evaluator May Cause Many Event ID 565 Events =

Article ID: 311258

Article Last Modified on 10/27/2006

-

APPLIES TO


 * Microsoft Systems Management Server 2.0 Standard Edition

-



This article was previously published under Q311258



SYMPTOMS
In a Microsoft Windows 2000 Active Directory-based environment with Systems Management Server (SMS) 2.0 Service Pack 2 (SP2) or later installed and success auditing of directory service access enabled, the SMS Service account may generate many Event ID 565 entries in the Security event log.



CAUSE
This behavior occurs because the SMS Service account's group membership is evaluated repeatedly as Collection Evaluator monitors collections.



WORKAROUND
To work around this problem, disable the success auditing of directory service accesses.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Additional query words: prodsms colleval

Keywords: kbbug kbprb KB311258

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.