none
Security event log ID 4672 Windows 7 home, repeating log entry

    Question

  • Why is this event happening over and over?
    Event ID 4672
    BODY{font:x-small 'Verdana';margin-right:1.5em} .c{cursor:hand} .b{color:red;font-family:'Courier New';font-weight:bold;text-decoration:none} .e{margin-left:1em;text-indent:-1em;margin-right:1em} .k{margin-left:1em;text-indent:-1em;margin-right:1em} .t{color:#990000} .xt{color:#990099} .ns{color:red} .dt{color:green} .m{color:blue} .tx{font-weight:bold} .db{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;border-left:1px solid #CCCCCC;font:small Courier} .di{font:small Courier} .d{color:blue} .pi{color:blue} .cb{text-indent:0px;margin-left:1em;margin-top:0px;margin-bottom:0px;padding-left:.3em;font:small Courier;color:#888888} .ci{font:small Courier;color:#888888} PRE{margin:0px;display:inline} <script><!-- function f(e){ if (e.className=="ci"){if (e.children(0).innerText.indexOf("\n")>0) fix(e,"cb");} if (e.className=="di"){if (e.children(0).innerText.indexOf("\n")>0) fix(e,"db");} e.id=""; } function fix(e,cl){ e.className=cl; e.style.display="block"; j=e.parentElement.children(0); j.className="c"; k=j.children(0); k.style.visibility="visible"; k.href="#"; } function ch(e){ mark=e.children(0).children(0); if (mark.innerText=="+"){ mark.innerText="-"; for (var i=1;i<e.children.length;i++) e.children(i).style.display="block"; } else if (mark.innerText=="-"){ mark.innerText="+"; for (var i=1;i<e.children.length;i++) e.children(i).style.display="none"; }} function ch2(e){ mark=e.children(0).children(0); contents=e.children(1); if (mark.innerText=="+"){ mark.innerText="-"; if (contents.className=="db"||contents.className=="cb") contents.style.display="block"; else contents.style.display="inline"; } else if (mark.innerText=="-"){ mark.innerText="+"; contents.style.display="none"; }} function cl(){ e=window.event.srcElement; if (e.className!="c"){e=e.parentElement;if (e.className!="c"){return;}} e=e.parentElement; if (e.className=="e") ch(e); if (e.className=="k") ch2(e); } function ex(){} function h(){window.status=" ";} document.onclick=cl; --></script>
    - < Event xmlns =" http://schemas.microsoft.com/win/2004/08/events/event " >
    - < System >
      < Provider Name =" Microsoft-Windows-Security-Auditing " Guid =" {54849625-5478-4994-A5BA-3E3B0328C30D} " />
      < EventID > 4672 </ EventID >
      < Version > 0 </ Version >
      < Level > 0 </ Level >
      < Task > 12548 </ Task >
      < Opcode > 0 </ Opcode >
      < Keywords > 0x8020000000000000 </ Keywords >
      < TimeCreated SystemTime =" 2010-02-21T11:18:20.509800000Z " />
      < EventRecordID > 1903 </ EventRecordID >
      < Correlation />
      < Execution ProcessID =" 520 " ThreadID =" 556 " />
      < Channel > Security </ Channel >
      < Computer > Tom-PC </ Computer >
      < Security />
      </ System >
    - < EventData >
      < Data Name =" SubjectUserSid " > S-1-5-18 </ Data >
      < Data Name =" SubjectUserName " > SYSTEM </ Data >
      < Data Name =" SubjectDomainName " > NT AUTHORITY </ Data >
      < Data Name =" SubjectLogonId " > 0x3e7 </ Data >
      < Data Name =" PrivilegeList " > SeAssignPrimaryTokenPrivilege SeTcbPrivilege SeSecurityPrivilege SeTakeOwnershipPrivilege SeLoadDriverPrivilege SeBackupPrivilege SeRestorePrivilege SeDebugPrivilege SeAuditPrivilege SeSystemEnvironmentPrivilege SeImpersonatePrivilege </ Data >
      </ EventData >
      </ Event >

    Tom C
    Sunday, February 21, 2010 12:35 PM

Answers

All replies