Event Message:

Indirect access to an object has been obtained: Object Type: name Object Name: name Process ID: number Primary User Name: user name Primary Domain: name Primary Logon ID: number Client User Name: user name Client Domain: name Client Logon ID: number Accesses: name 0

Explanation:

One operation performed by Windows 2000 that causes an access check on an object when creating another object is connecting to an LPC (local procedure call) port. This audit record is used to describe that operation.