This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security.
Is this normal?
The majority are Audit Success Messages with the Event ID 5379. There are approximately 50 of these identical messages every minute. Thanks for any insight on this.
See below for typical Message:
Credential Manager credentials were read.
Subject:
Security ID: DESKTOP\*****
Account Name: *****
Account Domain: DESKTOP
Logon ID: 0x354889
Read Operation: Enumerate Credentials
This event occurs when a user performs a read operation on stored credentials in Credential Manager.
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Hello, I think I figured out the problem. I disabled all the tasks in the Task Scheduler and voila - problem solved. There are many applications running in the background and some of them are repeatable every 10-60 minute. I think that one of them was responsible for the opening cmd console and running 5379 event, but I don't know which one.
Having the same issue here. Got here because some of my games were crashing, straight to desktop with no error messages. Upon checking the event viewer, every time I see a crash, I see event 4624, immediately followed by event 4672 and then a big list of event 5379. This causes my games to crash every time it happens, multiple times per hour. My gaming PC is basically unusable. Haven't found a fix anywhere.
As someone else pointed out, yes we know that event 5379 is not the CAUSE of the issue, but it has to be related or caused by that same issue because it wouldn't be there for every crash otherwise.
I now ran sfc /scannow and it found some corrupt files, I will update if this ended up fixing the issue but somehow I doubt it will be this easy.
@nathanhowell3 - have you checked that things like Windows updates, Windows store, and ONeDrive still work? How about Windows Security (Defender) does it still open?
Hey guys, sorry I'm a bit late to this thread, I've been having this issue for about 3 months now and its been driving me insane, however I think I've found a workaround solution that doesn't require installing new hardware.
First of all, I removed my Microsoft account from my PC and left only a local account, from there go to control panel and go to credentials manager, then remove all of the access' listed. Then in services, disable credential manager and credentialenrollmentmanager. After that navigate to system32 and disable auditing of the applications rooted to the services - lsass.exe and credentialenrollmentmanager.exe, I also disabled inheriting and revoked access to read and write by taking ownership of the applications.
I do not know for sure whether each step is necessary, however this has stopped the excessive amounts of 5379 audits completely, and my pc is running much more smoothly because of it ( I was getting about 10 new audits whenever a window or overlay opened or was switched to/brought to front). Also disabling the server service might be important as well, I'm unsure of whether it impacted the results.
@David Salmon - even fresh installs will have 5379 events. It is a NORMAL "info" event, just a standard audit event, for user activity that uses credentials. It is NOT signifying any problem - it is just annoying and a bit excessive for normal home systems.
