Hey, did you ever figure out a solution? I also get 500 of these at a time.
Excessive Security Log Events - Event ID 5379 - Windows 10
I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security.
Is this normal?
The majority are Audit Success Messages with the Event ID 5379. There are approximately 50 of these identical messages every minute. Thanks for any insight on this.
See below for typical Message:
Credential Manager credentials were read.
Subject:
Security ID: DESKTOP\*****
Account Name: *****
Account Domain: DESKTOP
Logon ID: 0x354889
Read Operation: Enumerate Credentials
This event occurs when a user performs a read operation on stored credentials in Credential Manager.
Windows for home | Windows 10 | Performance and system failures
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
52 answers
Sort by: Oldest
-
Anonymous
2020-08-27T22:45:33+00:00 -
Anonymous
2020-08-27T22:46:06+00:00 Have you figured out whats causing this? I am having same issue
-
Anonymous
2020-08-31T09:52:32+00:00 I have not figured it out yet. What i did find out though is my pc is incompatible with the new windows version and so it likes to malfunction. I cant use any of microsofts built in software due to it, and i cant revert back to 1909 either. So right now my pc is literally for gaming. I cant even open a picture on my computer.
-
Anonymous
2020-10-14T21:27:30+00:00 this doesn't work for me.
-
Anonymous
2020-10-19T12:28:08+00:00 I have seen MANY posts on this forum, about this specific issue (excessive 5379 events), and many other EVENT ID's. as well. These are actually "audit success" events, and NOT errors, and as Ed Tittel has stated, this stuff (and telemetry) started way back from the Vista OS days.
Even a freshly installed Windows 10 machine, with NOTHING extra added, will start logging MANY 5379 and related events, especially if using a Microsoft email based account, rather than a local account (some error events too). This is because there are several "internal" special admin accounts in the OS to "get stuff done".
Actually the error events (not the 5379 etc) are what most of the unscrupulous scammers rely on to "scare" dumb users into paying a fee to "fix" their computers, because of "serious errors", when they log in remotely, take over the machine, and run Event Viewer for them to see. These are just "normal" of course, mainly because like 99% of commercial software, it is not perfect, and the hundreds of thousands of different PC configurations that users have cannot be perfectly matched to perfect drivers working perfectly!
So, because you see "thousands of event entries" or a few hundred errors or warnings, DON'T make the knee-jerk reaction that many do, that it is the "magic bullet" that points to the cause of whatever problem you are chasing. it is RARELY the case, and will most times send you on a "wild goose chase"!
Instead, do a proper, logical approach to fault-finding your issue.
First, try to define the problem. Is it random, or reproducible with a set of known actions. If reproducible, write down the sequence of events that cause the issue, and document, cut/paste or screen-shot any error messages, in the order they occur.
Try to remember the date when the issue first started to occur, and track any changes, new software, new devices, or new updates that occurred close to that time. Did you update a driver around that time?
If any "apps" are crashing, download the Nirsoft APPCRASHVIEW WER Viewer program to check them out, to give possible clues to your issue.
Make good use of the Task manager to check high CPU and memory (one looping core at 100% will show as 25% on a 4-core CPU). Add extra info columns to check for increasing memory use (memory leaks). Go to APPS settings and turn off background apps that do not need to run in background.
If the issue is intermittent and random, it will be more difficult to pin down, BUT if you go back to basics, and eliminate some obvious items that many forget, it may move you forward. For instance, when did you last monitor your CPU or Motherboard, or Graphics adapter temperatures? Did you check the SMART/Health status of your HDD/SSD disks? Are all your fans working, and not clogged. Is your PSU delivering enough power for your internal add-in cards etc? Food for thought