We value your feedback.
Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!
Course Of The Month
8 days, 12 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Audit Failure Event ID 4674
Posted on 2012-12-28
I'm looking for the cause of this error in my Security Event Log. The server is Windows 2008 R2 Standard running Microsoft Lync 2010 with the integrated SQL (formally known as MSDE, I don't recall what they call it today). This error seems to occur about every 20 minutes or when manually running GPUPDATE. When it occurs I always get 3 in a row (never any more or less).
Log: Security
Task Category: Sensitive Privilege Use
Keywords: Audit Failure
Event ID: 4674
Log: Security
Task Category: Sensitive Privilege Use
Keywords: Audit Failure
Event ID: 4674
An operation was attempted on a privileged object.
Subject:
Security ID: LOCAL SERVICE
Account Name: LOCAL SERVICE
Account Domain: NT AUTHORITY
Logon ID: 0x3e5
Object:
Object Server: LSA
Object Type: -
Object Name: -
Object Handle: 0x0
Process Information:
Process ID: 0x1e8
Process Name: C:\Windows\System32\lsass.exe
Requested Operation:
Desired Access: 16777216
Privileges: SeSecurityPrivilege
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
2-
2
4 Comments
That is a pretty generic log entry, but may be triggered by a elevated-permissions account accessing some object.
Take a look at this thread in TechNet for a related discussion which may point you in the right direction.
BTW "SQL Express" is the name you are looking for.
Take a look at this thread in TechNet for a related discussion which may point you in the right direction.
BTW "SQL Express" is the name you are looking for.
Featured Post
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory.
If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Uncontrolled local administrators groups within any organization pose a huge security risk. Because these groups are locally managed it becomes difficult to audit and maintain them.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses
Course of the Month8 days, 12 hours left to enroll
Earn Certification
MCSA Configuring Windows 7 Exam 70-680
$49.00$44.10
734 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.