Excessive Security Log Events - Event ID 5379 - Windows 10

Anonymous
2020-04-26T06:15:06+00:00

I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security.  

Is this normal?  

The majority are Audit Success Messages with the Event ID 5379.  There are approximately 50 of these identical messages every minute. Thanks for any insight on this.

See below for typical Message:

Credential Manager credentials were read.

Subject:

Security ID: DESKTOP\*****

Account Name: *****

Account Domain: DESKTOP

Logon ID: 0x354889

Read Operation: Enumerate Credentials

This event occurs when a user performs a read operation on stored credentials in Credential Manager.

Windows for home | Windows 10 | Performance and system failures

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

52 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2021-09-18T23:39:13+00:00

    Having the same issue here. Got here because some of my games were crashing, straight to desktop with no error messages. Upon checking the event viewer, every time I see a crash, I see event 4624, immediately followed by event 4672 and then a big list of event 5379. This causes my games to crash every time it happens, multiple times per hour. My gaming PC is basically unusable. Haven't found a fix anywhere.

    As someone else pointed out, yes we know that event 5379 is not the CAUSE of the issue, but it has to be related or caused by that same issue because it wouldn't be there for every crash otherwise.

    I now ran sfc /scannow and it found some corrupt files, I will update if this ended up fixing the issue but somehow I doubt it will be this easy.

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments
  2. Anonymous
    2020-10-19T19:46:07+00:00

    For me it was a faulty external card reader. If the errors happen frequently (like every few minutes and has dozens of entries, not just one entry every few days), start unplugging/replacing any USB/Bluetooth devices that may be plugged in, e.g. with wireless keyboards and mice - if you have a spare dongle, replace the one that is plugged in and see if that stops the errors, use a spare keyboard card reader, flash/thumb/USB drives, external hard drives, USB webcam...etc.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  3. Anonymous
    2020-07-04T21:21:31+00:00

    I have was experiencing a similar thing with my desktop today (event entries for eventID 5379 - about 20 entries in one second -  but no crashes + eventID 4798 - random frequency but typically every 1 to 4 seconds).

    I had alternating sets of log entries for of event 5379 and 4798 and a constant "disconnected device" sound alert. I came across an article about a failing USB device so I disconnected my USB memory card reader and both the sound alert and the log entries for those 2 eventID's have stopped for the past 20 mins.

    It could be that the card reader is failing or perhaps not properly plugged in. It could be the USB plug itself that has an issue, I haven't tested any further yet, I'm just glad that the constant bleeps have stopped!

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  4. Anonymous
    2020-04-27T01:43:15+00:00

    I re-installed Windows and still experiencing the same issue.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments
  5. Anonymous
    2020-04-26T06:19:24+00:00

    What OS build are you on?  Hit the Windows key, type winver, hit Enter.

    Or Windows key+r, winver, OK

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments