I have received the following Audit Failures in my logs last night in which one server is trying to access another server:
A network share object was accessed.
Subject:
Security ID:
Domain\Server1$
Account Name:
Server1$
Account Domain:Domain
Logon ID:
0x14f90535
Network Information:
Object Type:
File
Source Address:xxx.xxx.xxx.xxx
Source Port:
12345
Share Information:
Share Name:
\\*\E$
Share Path:
\??\E:\
Access Request Information:
Access Mask:
0x1
Accesses:
ReadData (or ListDirectory)
I am very new to working on server and was wondering is someone may be able to point me is a direction to start looking.