Events for authorization roles are not logged in the security log when you configure auditing for Windows 2000 Authorization Manager Runtime

If you configure auditing for Windows 2000 Authorization Manager Runtime in Microsoft Windows 2000, security-related events for authorization roles are not logged in the security event log.

This problem occurs because events that are used by authorization roles are not registered in the Local Security Authority (LSA). Therefore, events are not generated by authorization roles for the security event log.

Hotfix Information

To resolve this problem, install the "Update for Microsoft Windows 2000: KB821887" hotfix (Windows2000-KB821887-x86-ENU.exe).

The following file is available for download from the Microsoft Download Center:

Download the Windows2000-KB821887-x86-ENU.exe package now. (http://download.microsoft.com/download/1/9/3/193fcd11-a96b-44ca-97b8-6dfc40468337/windows2000-kb821887-x86-enu.exe)
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help to prevent any unauthorized changes to the file.

Prerequisites

This hotfix requires Windows 2000 Service Pack 4 (SP4).

Restart requirement

You must restart your computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section of this article.

Windows 2000 Authorization Manager Runtime provides a framework for integrating role-based access control into applications. It allows administrators who use those applications to provide access through assigned user roles that relate to job functions. Windows 2000 Authorization Manager Runtime applications store authorization policy in Active Directory directory service or in XML files in the form of authorization stores that apply authorization policy at runtime.

For more information about the "Update for Microsoft Windows 2000: KB821887" hotfix, visit the following Microsoft Web site:
For additional information about how to obtain the latest service pack for Windows 2000, click the following article number to view the article in the Microsoft Knowledge Base: For additional information about how hotfix packages are named, click the following article number to view the article in the Microsoft Knowledge Base: