Hi, I get the error "A privileged service was called." for various applications. What could be the reason for it and how do I stop getting this error? Please help. Thank you, Nikki.Nilakshi S. Batuwitage

Hi Nikki, Thanks for posting in TechNet forum. When did you get this error? Which kind of application will get this error? What's the detailed error message? Have you fully scanned your computer? Open your Event Viewer, are there any related logs? Provide them with us for further troubleshooting. Do you logon as administrator? Please configure Audit Sensitive Privilege Use in Group Policy, then it will generate the events. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, It calls a privileged service for instance, McAfee antivirus, Dell Touch Pad etc. My domain account has more previledges than a user account as I support for the company. Process ID: 0x110c Process Name: C:\Program Files\DellTPad\hidfind.exe and Process ID: 0xabc Process Name: c:\Program Files(x86)\McAfee\Common Framework\McTray.exe EventID: 4673 It says privileges: SeTcbPrivilege. What does this mean? I am on Windows 7 64-bit and Windows 7 32-bit operating systems. Please let me know your thoughts. Thank you, Nikki. Nilakshi S. Batuwitage

Hi, It calls a privileged service for instance, McAfee antivirus, Dell Touch Pad etc. My domain account has more previledges than a user account as I support for the company. Process ID: 0x110c Process Name: C:\Program Files\DellTPad\hidfind.exe EventID: 4673 Please let me know your thoughts. Thank you, Nikki. Nilakshi S. Batuwitage

Hi Nikki, Thanks for the update. Please run wf.msc to open the Windows Firewall with Advanced Security on the local computer. Click Actions, choose Properties, in the Domain Profile Tab, please make the firewall state to ON, click OK. And allow the inbound/outbound connections. Then check if the issue resolved. If it doesn't work, run wf.msc again, click Actions, choose Export Policy, then upload it to your SkyDrive in a publick folder, and provide a link here. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, How's going? Please feel free to give us any update. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Miya, You mentioned "Click Actions, choose Properties, in the Domain Profile Tab, please make the firewall state to ON, click OK. And allow the inbound/outbound connections." I see that the inbound connections is set to "Blocked (default)" by group policy for everyone in the company. Please let me know the reason to make it to "Allow". Thank you, Nikki. Nilakshi S. Batuwitage

Hi Nikki, Because I've seen a similar situation as yours, and the firewall settings might block the service. You can test on a problematic machine, put it in a single OU, it won't effect other machines in domain. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Miya, What is the reason to setup as Allowed for outbound connections? I think it is a security threat. Also I see that there are logon failures with eventID 4625 from different domain user accounts on my pc which comes from a different computer. Do you know the reason why it happens? Thank you, NikkiNilakshi S. Batuwitage

In case of some security threat, I recommend you have a this test on a problematic computer and put it in a single OU. For the eventID 4625, please refer to this: The Security event that has Event ID 4625 does not contain the user account name on a computer that is running Windows Vista, Windows Server 2008, Windows 7, or Windows Server 2008 R2. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi Miya, I tried the above hotfix and it says the update is not applicable to your computer. Do you have any other suggestions that I could try. I am on Windows 7 64-bit operating system. Thanks - Nikki.Nilakshi S. Batuwitage

Hi Nikki, Try the System Update Readiness Tool. It will create a log file that captures any issue. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.