Handle Closed: Object Server: %1 Handle ID: %2 Process ID: %3 Image File Name: %4

Details
Product: Windows Operating System
Event ID: 562
Source: Security
Version: 5.2
Symbolic Name: SE_AUDITID_CLOSE_HANDLE
Message: Handle Closed:
Object Server: %1
Handle ID: %2
Process ID: %3
Image File Name: %4
   
Explanation

The handle to the accessed object was successfully closed.

This event is associated with the Security 560 event, which indicates that a handle was successfully granted for the object. The Security 562 event is logged only when the corresponding Security 560 event indicates success.

The Handle ID is a unique number that is assigned by the operating system when a request is made to access an object. Multiple requests to access the same object may share a Handle ID. The Handle ID is valid for that object from the time that the Security 560 event is logged until the Security 562 event is logged.

   
User Action

No user action is required.

Related:

Leave a Reply