Excessive Security Log Events - Event ID 5379 - Windows 10

Hi @GaetanoD - that is strange, I had a little card reader unit in my Desktop PC case-front, that was giving LOTS of EVENT ID 442, and it seems that Windows 10 (or the USB driver for it) did not like it. It seemed to be "stuck" on a "G" drive that was not actually inserted (and it was NOT a ghost device listed in Device Manager). I hit on the idea of actually inserting an old memory card with photos on (that I had already got backed up), and that seemed to stop the errors. I have seen another post on here about a bad USB cable causing issues too, so you never know with hardware, some things are hard to test and eliminate sometimes.

Here is a useful site, to help  find "unknown devices" from those horrible device strings in Event Viewer and match them with Device Manager items:

https://devicehunt.com/

For me it was a faulty external card reader. If the errors happen frequently (like every few minutes and has dozens of entries, not just one entry every few days), start unplugging/replacing any USB/Bluetooth devices that may be plugged in, e.g. with wireless keyboards and mice - if you have a spare dongle, replace the one that is plugged in and see if that stops the errors, use a spare keyboard card reader, flash/thumb/USB drives, external hard drives, USB webcam...etc.

I have seen MANY posts on this forum, about this specific issue (excessive 5379 events), and many other EVENT ID's. as well. These are actually "audit success" events, and NOT errors, and as Ed Tittel has stated, this stuff (and telemetry) started way back from the Vista OS days.

Even a freshly installed Windows 10 machine, with NOTHING extra added, will start logging MANY 5379 and related events, especially if using a Microsoft email based account, rather than a local account (some error events too).  This is because there are several "internal" special admin accounts in the OS to "get stuff done".

Actually the error events (not the 5379 etc) are what most of the unscrupulous scammers rely on to "scare" dumb users into paying a fee to "fix" their computers, because of "serious errors", when they log in remotely, take over the machine, and run Event Viewer for them to see. These are just "normal" of course, mainly because like 99% of commercial software, it is not perfect, and the hundreds of thousands of different PC configurations that users have cannot be perfectly matched to perfect drivers working perfectly!

So, because you see "thousands of event entries" or a few hundred errors or warnings, DON'T make the knee-jerk reaction that many do, that it is the "magic bullet" that points to the cause of whatever problem you are chasing. it is RARELY the case, and will most times send you on a "wild goose chase"!

Instead, do a proper, logical approach to fault-finding your issue.

First, try to define the problem. Is it random, or reproducible with a set of known actions.  If reproducible, write down the sequence of events that cause the issue, and document, cut/paste or screen-shot any error messages, in the order they occur.

Try to remember the date when the issue first started to occur, and track any changes, new software, new devices, or new updates that occurred close to that time. Did you update a driver around that time?

If any "apps" are crashing, download the Nirsoft APPCRASHVIEW WER Viewer program to check them out, to give possible clues to your issue.

Make good use of the Task manager to check high CPU and memory (one looping core at 100% will show as 25% on a 4-core CPU). Add extra info columns to check for increasing memory use (memory leaks). Go to APPS settings and turn off background apps that do not need to run in background.

If the issue is intermittent and random, it will be more difficult to pin down, BUT if you go back to basics, and eliminate some obvious items that many forget, it may move you forward. For instance, when did you last monitor your CPU or Motherboard, or Graphics adapter temperatures? Did you check the SMART/Health status of your HDD/SSD disks? Are all your fans working, and not clogged. Is your PSU delivering enough power for your internal add-in cards etc? Food for thought

this doesn't work for me.

I have not figured it out yet. What i did find out though is my pc is incompatible with the new windows version and so it likes to malfunction. I cant use any of microsofts built in software due to it, and i cant revert back to 1909 either. So right now my pc is literally for gaming. I cant even open a picture on my computer.