Audit id 560 operation

Hi!

In event view(security log), if I open or delete or modify or close a
file(ex. test.txt) , all event appear with event id 560.

I don't understant, from event view(security log),
when file test.txt is deleted or open or modify or close.


Thanks!

What Service Pack level is XP now at ?

Event IDs 560 and 562 appear many times in the security event log
http://support.microsoft.com/kb/841001


MowGreen
===============
*-343-* FDNY
Never Forgotten
===============



Understand audit xp wrote:

> Hi!
>
> In event view(security log), if I open or delete or modify or close a
> file(ex. test.txt) , all event appear with event id 560.
>
> I don't understant, from event view(security log),
> when file test.txt is deleted or open or modify or close.
>
>
> Thanks!