Hello,
I was hoping someone could help. After performing an upgrade from Windows Server 2003 Standard to 2008 Server Standard, I am getting many instances of Event ID 4673 in the Security Logs. I have read many many forums of folks who have suggested to turn off the failure auditing in Group Policy, but beyond that there is little explanation. There is another 2008 Server Standard machine on my domain with the same GP applied to it and it is not logging these event 4673 security errors so I find that really strange. Why would one server be getting this audit failures and the other not? This is occurring mostly on computer accounts, but I've seen some user accounts too. I was hoping someone could add their 2 cents on this issue. Below is a copy of the event details.
A privileged service was called.
Subject:
Security ID:
DOMAIN\COMPUTER NAME
Account Name:
COMPUTER NAME
Account Domain:
DOMAIN NAME
Logon ID:
0x13a6bd0b
Service:
Server:
Security
Service Name:
-
Process:
Process ID:
0x4
Process Name:
Service Request Information:
Privileges:
SeBackupPrivilege