Event Message:

Object Open: Object Server: computer name Object Type: parameter Object Name: name New Handle ID: value Operation ID: \{value,value\} Process ID: value Primary User Name: user name Primary Domain: name Primary Logon ID: computer name0 Client User Name: computer name1 Client Domain: computer name2 Client Logon ID: value Accesses parameter Privileges parameter

Explanation:

This event record indicates either that an object has been successfully opened or that an attempt to open an object was rejected. The only way to determine if the object was opened or the request was rejected is to look at the Object Name in the audit log. Note: There are security implications to this action if the object name represents a file containing sensitive data.

User Action:

If the specified object name represents a file containing sensitive data, make sure the specified user was supposed to have access to the file.