Event_ID 4674/4673 - No Description Expand / Collapse
Author
Message
Posted 4/23/2019 11:43:20 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/28/2019 2:49:28 PM
Posts: 1, Visits: 0
Randy, I keep getting: Privileged Object Operation from "a named, admin account" to Security\0x364; Access Requested: Delete, Read Control, Write_DAC, Write_Owner, ACCESS_SYS_SEC, Query Mutant State SYNCHRONIZE, Set Key Value, Create Sub Key, Enumerate Sub Keys, Notify About Changes to Keys, Create Link, 2031617, 177603119; Event_ID , 4673 and 4674; Occurs 7 days a week around the clock. What's causing this please? There is no description and the user isn't logged in so it must be an automated process...but what? I appreciate your help.
Post #8560
Posted 6/24/2019 2:56:28 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
A user has to be logged in somehow. I would take a look at the all of the events that contain the same logon ID to see what other activity, if any, is also taking place. Also, make sure you have adequate logging enabled.
Post #8576
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 2:38am