Excessive Security Log Events - Event ID 5379 - Windows 10

Anonymous
2020-04-26T06:15:06+00:00

I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security.  

Is this normal?  

The majority are Audit Success Messages with the Event ID 5379.  There are approximately 50 of these identical messages every minute. Thanks for any insight on this.

See below for typical Message:

Credential Manager credentials were read.

Subject:

Security ID: DESKTOP\*****

Account Name: *****

Account Domain: DESKTOP

Logon ID: 0x354889

Read Operation: Enumerate Credentials

This event occurs when a user performs a read operation on stored credentials in Credential Manager.

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

52 answers

Sort by: Oldest
  1. Anonymous
    2020-10-19T19:46:07+00:00

    For me it was a faulty external card reader. If the errors happen frequently (like every few minutes and has dozens of entries, not just one entry every few days), start unplugging/replacing any USB/Bluetooth devices that may be plugged in, e.g. with wireless keyboards and mice - if you have a spare dongle, replace the one that is plugged in and see if that stops the errors, use a spare keyboard card reader, flash/thumb/USB drives, external hard drives, USB webcam...etc.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2020-10-20T12:29:32+00:00

    Hi @GaetanoD - that is strange, I had a little card reader unit in my Desktop PC case-front, that was giving LOTS of EVENT ID 442, and it seems that Windows 10 (or the USB driver for it) did not like it. It seemed to be "stuck" on a "G" drive that was not actually inserted (and it was NOT a ghost device listed in Device Manager). I hit on the idea of actually inserting an old memory card with photos on (that I had already got backed up), and that seemed to stop the errors. I have seen another post on here about a bad USB cable causing issues too, so you never know with hardware, some things are hard to test and eliminate sometimes.

    Here is a useful site, to help  find "unknown devices" from those horrible device strings in Event Viewer and match them with Device Manager items:

    https://devicehunt.com/

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2020-10-26T21:50:19+00:00

    It looks like microsoft is rolling out bugs to force people to update their hardware.

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2020-10-26T23:03:54+00:00

    That might be true for old Wireless Mice, where the Bluetooth protocol uses old security protocols, and do not work after updates that fix the enforcement of better security in the Bluetooth software stack. However, for $15 or so, I would rather replace any older mouse or keyboard, to ensure good security.

    As regards bugs, Microsoft do not do this intentionally, but with hundreds of thousands of different hardware configurations and driver combinations (many items with unsigned drivers), it must be very hard, even for a large company like Microsoft, to get it 100% correct every time. If an issue occurs after any update, check the forums, and go to the manufacturers site for your device in error, and ensure you have the latest software and drivers. This is especially true for Graphics Cards.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments
  5. Anonymous
    2020-12-18T22:14:25+00:00

    so does anyone have a fix for this or nah? is it as simple as updating or is this something I have to live with now.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments No comments