Forum

Ultimate Windows Security Forum » Security Log » 4673 - A privileged service was called » Event ID 4673 SeTcbPrivilege Audit Failure

Event ID 4673 SeTcbPrivilege Audit Failure Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
doddr
Posted 6/19/2019 2:46:03 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 6/19/2019 2:27:41 PM
Posts: 1, Visits: 0
we have a rogue process causing the event ID 4673 several times a minute - we are trying to remove this event from the log - it is a certain user in our local admin and we still are seeing this failure. Any help would be greatly appreciated
Post #8569
derekthomas
Posted 6/24/2019 3:08:10 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
Can you uninstall the service or disable the user?
Post #8580
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 2:20am