Server Management - Systems Insight Manager
cancel
Showing results for 
Search instead for 
Did you mean: 

HP SIM EventID 552

Brandon Pembo
Occasional Advisor

HP SIM EventID 552

I have a Windowns 2003 server running 2 network monitoring tools. IpSwitch Watsup gold and HP System Insight Manager 5.1.

On that box, I am getting the following events over and over and over in the security events log. From what I've been able to dig up on the internet about this Event, it's simply a successful logon/logoff. so I don't understand why it's in my event log over and over and over.
---------------------------------------------------------------------------------------------
Logon attempt using explicit credentials:
Logged on user:
User Name: BRMONITOR$
Domain: TP
Logon ID: (0x0,0x3E7)
Logon GUID: {3f6c6fcc-00db-06f5-ddc5-9d80e26e1c60}
User whose credentials were used:
Target User Name: administrator
Target Domain: TP.TPBP.COM
Target Logon GUID: -

Target Server Name: brnav.tp.tpbp.com
Target Server Info: RPCSS/brnav.tp.tpbp.com
Caller Process ID: 472
Source Network Address: -
Source Port: -
------------------------------------------------------------------------

Logon attempt using explicit credentials:
Logged on user:
User Name: BRMONITOR$
Domain: TP
Logon ID: (0x0,0x3E7)
Logon GUID: {6490d67b-9992-290e-ede5-1507f76854d3}
User whose credentials were used:
Target User Name: administrator
Target Domain: tp
Target Logon GUID: -

Target Server Name: brmail.tp.tpbp.com
Target Server Info: brmail.tp.tpbp.com
Caller Process ID: 2796
Source Network Address: -
Source Port: -
---------------------------------------------------------------------------
Logon attempt using explicit credentials:
Logged on user:
User Name: BRMONITOR$
Domain: TP
Logon ID: (0x0,0x3E7)
Logon GUID: {6490d67b-9992-290e-ede5-1507f76854d3}
User whose credentials were used:
Target User Name: administrator
Target Domain: tp
Target Logon GUID: -

Target Server Name: brfax.tp.tpbp.com
Target Server Info: brfax.tp.tpbp.com
Caller Process ID: 2796
Source Network Address: -
Source Port: -
------------------------------------------------------------------------------
Can someone please shed some light on this for me?

I appreciate thje help in advance.

Brandon Pembo
1 REPLY
Thomas Chittenden
Occasional Visitor

Re: HP SIM EventID 552

I have the same issue and I'd like to find a solution that doesn't involve changing domain security group policy on this member server running HP SIM. Is there anything else that can be done to suppress these 552 Event ID's caused by HP SIM?