Event Message:

Object Open: Object Server: computer name Object Type: parameter Object Name: name New Handle ID: value Operation ID: \{value,value\} Process ID: value Primary User Name: user name Primary Domain: name Primary Logon ID: computer name0 Client User Name: computer name1 Client Domain: computer name2 Client Logon ID: value Accesses parameter Privileges parameter

Source Event Log Event ID Event Type
Security Security 560 Success Audit

Explanation:

This event record indicates either that an object has been successfully opened or that an attempt to open an object was rejected. The only way to determine if the object was opened or the request was rejected is to look at the ôObject Nameö in the audit log. Note: There are security implications to this action if the object name represents a file containing sensitive data.

User Action:

If the specified object name represents a file containing sensitive data, make sure the specified user was supposed to have access to the file.