Multiple instances of Event ID: 4673

Hello,

I was hoping someone could help.  After performing an upgrade from Windows Server 2003 Standard to 2008 Server Standard, I am getting many instances of Event ID 4673 in the Security Logs.   I have read many many forums of folks who have suggested to turn off the failure auditing in Group Policy, but beyond that there is little explanation.  There is another 2008 Server Standard machine on my domain with the same GP applied to it and it is not logging these event 4673 security errors so I find that really strange.  Why would one server be getting this audit failures and the other not?  This is occurring mostly on computer accounts, but I've seen some user accounts too.   I was hoping someone could add their 2 cents on this issue.  Below is a copy of the event details. 

A privileged service was called.

Subject:
Security ID: DOMAIN\COMPUTER NAME
Account Name: COMPUTER NAME
Account Domain: DOMAIN NAME
Logon ID: 0x13a6bd0b

Service:
Server: Security
Service Name: -

Process:
Process ID: 0x4
Process Name:

Service Request Information:
Privileges: SeBackupPrivilege

May 21st, 2015 8:43pm

Hi,

This event is generated when sensitive privileges is used.

The event you provided means that the 0x4 process(System) is attemping to backup some files or folders.

For detailed information, please refer to the link below:

https://technet.microsoft.com/en-us/library/dd772724(v=ws.10).aspx

Best Regards.

Free Windows Admin Tool Kit Click here and download it now
May 23rd, 2015 11:45pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics