troubleshooting Question

Mulitple Events in Event Viewer

Avatar of Juneaucounty
JuneaucountyFlag for United States of America asked on
PowershellSoftwareMicrosoft 365Windows Server 2012Active Directory
10 Comments1 Solution87 ViewsLast Modified:
In Even Viewer we are seeing a ton of events like the example below.  There are 20 or more a second.  We are trying to find out where they are coming from and how to stop them.  Any ideas and what else we can do?  Is there software out there that would help us in looking for info on these?  One of the things that is throwing us off is the username changes on every one of the events.  

- System

  - Provider

   [ Name]  Microsoft-Windows-Security-Auditing
   [ Guid]  {54849625-5478-4994-A5BA-3E3B0328C30D}
   EventID 4776
   Version 0
   Level 0
   Task 14336
   Opcode 0
   Keywords 0x8010000000000000
  - TimeCreated

   [ SystemTime]  2020-04-29T12:35:59.662914700Z
   EventRecordID 168057449
  - Execution

   [ ProcessID]  704
   [ ThreadID]  9872
   Channel Security

- EventData

  TargetUserName tomcat
  Status 0xc0000064

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 10 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 10 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros