Excessive Security Log Events - Event ID 5379 - Windows 10

Anonymous
2020-04-26T06:15:06+00:00

I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security.  

Is this normal?  

The majority are Audit Success Messages with the Event ID 5379.  There are approximately 50 of these identical messages every minute. Thanks for any insight on this.

See below for typical Message:

Credential Manager credentials were read.

Subject:

Security ID: DESKTOP\*****

Account Name: *****

Account Domain: DESKTOP

Logon ID: 0x354889

Read Operation: Enumerate Credentials

This event occurs when a user performs a read operation on stored credentials in Credential Manager.

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

52 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2021-06-06T14:36:22+00:00

    Non of it matters because the 5379 Audit Success postings are back. I thought they were gone, but no, they are back.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  2. Anonymous
    2021-06-05T13:11:41+00:00

    @RemoteComputerTechnician:

    Do you regularly check your Event Logs for the 5379 "Audit Success" events?

    If so, are you stating that after your profile change, these have stopped completely, or have they just reduced to an acceptable level?

    I am also curious how you "moved" all of your required profile items, as quite often, profile manipulation of files INTO an active loaded (logged in) profile can be blocked. Was it done via a manual "drag and drop", or a PowerShell script, CMD/DOS script, or a third party product?

    Did ALL of your normal/expected win32 programs and APPS work as normal with your new profile. Was this a LOCAL account or Microsoft Account profile by the way?

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2021-06-05T10:38:27+00:00

    You are correct.

    Soon after posting the "solution", the problem returned.

    Here is how I finally resolved the issue.

    I created a new user account, moved all files that needed to be tied to the user account from the old user account to the new user account (mail profile, documents, etc.) , and then deleted the old user account.

    So far, the issue has not returned.

    Hope you have the same success I have had.

    Sorry abut the bad information previously.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2021-06-04T22:49:49+00:00

    I can confirm these steps do not resolve the issue.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  5. Anonymous
    2021-05-15T02:02:40+00:00

    Tx So Much for this explanation

    Was this answer helpful?

    0 comments