Excessive Security Log Events - Event ID 5379 - Windows 10

Anonymous
2020-04-26T06:15:06+00:00

I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security.  

Is this normal?  

The majority are Audit Success Messages with the Event ID 5379.  There are approximately 50 of these identical messages every minute. Thanks for any insight on this.

See below for typical Message:

Credential Manager credentials were read.

Subject:

Security ID: DESKTOP\*****

Account Name: *****

Account Domain: DESKTOP

Logon ID: 0x354889

Read Operation: Enumerate Credentials

This event occurs when a user performs a read operation on stored credentials in Credential Manager.

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

52 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-10-26T23:03:54+00:00

    That might be true for old Wireless Mice, where the Bluetooth protocol uses old security protocols, and do not work after updates that fix the enforcement of better security in the Bluetooth software stack. However, for $15 or so, I would rather replace any older mouse or keyboard, to ensure good security.

    As regards bugs, Microsoft do not do this intentionally, but with hundreds of thousands of different hardware configurations and driver combinations (many items with unsigned drivers), it must be very hard, even for a large company like Microsoft, to get it 100% correct every time. If an issue occurs after any update, check the forums, and go to the manufacturers site for your device in error, and ensure you have the latest software and drivers. This is especially true for Graphics Cards.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2020-10-20T12:29:32+00:00

    Hi @GaetanoD - that is strange, I had a little card reader unit in my Desktop PC case-front, that was giving LOTS of EVENT ID 442, and it seems that Windows 10 (or the USB driver for it) did not like it. It seemed to be "stuck" on a "G" drive that was not actually inserted (and it was NOT a ghost device listed in Device Manager). I hit on the idea of actually inserting an old memory card with photos on (that I had already got backed up), and that seemed to stop the errors. I have seen another post on here about a bad USB cable causing issues too, so you never know with hardware, some things are hard to test and eliminate sometimes.

    Here is a useful site, to help  find "unknown devices" from those horrible device strings in Event Viewer and match them with Device Manager items:

    https://devicehunt.com/

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2020-10-14T21:27:30+00:00

    this doesn't work for me.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  4. Anonymous
    2020-08-27T22:46:06+00:00

    Have you figured out whats causing this? I am having same issue

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2020-08-27T22:45:33+00:00

    Hey, did you ever figure out a solution? I also get 500 of these at a time.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments