New
#1
Multiple Audit Failures for same Event ID
(If this is not the correct sub-forum, can an Admin please move it? Thanks)
For various reasons, I chose to have a look at various event logs on my PC (Win7/Firefox).
Should I be concerned that I have, literally, thousands of identical "Audit Failure" events (EventID - 4656, Source - AlertSource) logged every day?
The object in question is:
Object Server: PlugPlayManager
Object Type: Security
Object Name: PlugPlaySecurityObject
Handle ID: 0x0
Process information:
Process ID: 0x398
Process Name: C:\Windows\System\svchost.exe
Access Request Information:
Accesses: Unknown specific accesses
Access Reasons: -
Access Mask: 0x2
Privileges Used for Access Check: -
Restricted SID Count: 0
Last edited by MPF2015; 17 Jun 2015 at 12:37.