Computer Hangs microsoft windows security auditing event id 4624.

Hi all.. Im having some problems with my comp hanging while i listen to music lately..I looked at Windows event viewer and this is what i found with the corresponding times. This is quiite annoying any help you can suggest would be terrific. Im using Windows 7 64 bit

Description of the error:
An account was successfully logged on.

Subject:
    Security ID:        SYSTEM
    Account Name:        MATT-PC$
    Account Domain:        WORKGROUP
    Logon ID:        0x3e7

Logon Type:            5

New Logon:
    Security ID:        SYSTEM
    Account Name:        SYSTEM
    Account Domain:        NT AUTHORITY
    Logon ID:        0x3e7
    Logon GUID:        {00000000-0000-0000-0000-000000000000}

Process Information:
    Process ID:        0x204
    Process Name:        C:\Windows\System32\services.exe

Network Information:
    Workstation Name:   
    Source Network Address:    -
    Source Port:        -

Detailed Authentication Information:
    Logon Process:        Advapi 
    Authentication Package:    Negotiate
    Transited Services:    -
    Package Name (NTLM only):    -
    Key Length:        0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
    - Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
    - Transited services indicate which intermediate services have participated in this logon request.
    - Package name indicates which sub-protocol was used among the NTLM protocols.
    - Key length indicates the length of the generated session key. This will be 0 if no session key was requested.

Details
- < System >
  < Provider Name =" Microsoft-Windows-Security-Auditing " Guid =" {54849625-5478-4994-A5BA-3E3B0328C30D} " />
  < EventID > 4624 </ EventID >
  < Version > 0 </ Version >
  < Level > 0 </ Level >
  < Task > 12544 </ Task >
  < Opcode > 0 </ Opcode >
  < Keywords > 0x8020000000000000 </ Keywords >
  < TimeCreated SystemTime =" 2009-12-10T00:50:23.253155100Z " />
  < EventRecordID > 9073 </ EventRecordID >
  < Correlation />
  < Execution ProcessID =" 540 " ThreadID =" 1596 " />
  < Channel > Security </ Channel >
  < Computer > matt-PC </ Computer >
  < Security />
  </ System >
- < EventData >
  < Data Name =" SubjectUserSid " > S-1-5-18 </ Data >
  < Data Name =" SubjectUserName " > MATT-PC$ </ Data >
  < Data Name =" SubjectDomainName " > WORKGROUP </ Data >
  < Data Name =" SubjectLogonId " > 0x3e7 </ Data >
  < Data Name =" TargetUserSid " > S-1-5-18 </ Data >
  < Data Name =" TargetUserName " > SYSTEM </ Data >
  < Data Name =" TargetDomainName " > NT AUTHORITY </ Data >
  < Data Name =" TargetLogonId " > 0x3e7 </ Data >
  < Data Name =" LogonType " > 5 </ Data >
  < Data Name =" LogonProcessName " > Advapi </ Data >
  < Data Name =" AuthenticationPackageName " > Negotiate </ Data >
  < Data Name =" WorkstationName " />
  < Data Name =" LogonGuid " > {00000000-0000-0000-0000-000000000000} </ Data >
  < Data Name =" TransmittedServices " > - </ Data >
  < Data Name =" LmPackageName " > - </ Data >
  < Data Name =" KeyLength " > 0 </ Data >
  < Data Name =" ProcessId " > 0x204 </ Data >
  < Data Name =" ProcessName " > C:\Windows\System32\services.exe </ Data >
  < Data Name =" IpAddress " > - </ Data >


Thank you for any information you can provide....im kind of a noob when it comes to these sort of things.
|
Answer
Answer

Hi Mkress,

Welcome Back!

You might get this error if Windows Error Reporting Service is not started, you may try restarting the service on the computer and check, if the issue still persists or not, follow the steps below to Start the service:

1.      Click Start.

2.      Type Services in the Start Search.

3.      Search for Windows Error Reporting Service in the list.

4.      Right click on the Service.

5.      Click Properties.

6.      Set the Startup Type to Automatic.

7.      Set the Status to Start.

8.      Click Apply.

9.      Click OK.

Now restart the computer for the changes to effect.

I would also suggest that you perform check disk on the computer to check for bad sectors and disk related errors on the computer, follow the steps below:

1. Steps to perform chkdsk:

i. Click on start

ii. Type cmd in start search box.

 iii. Right click on cmd.exe in the Program list and then select the option Run as administrator.

iv. If you are prompted for an administrator password or for confirmation, type your password, or click Continue.

 v. In the command prompt window, type the following command and press enter Chkdsk /r

Note: During the restart process, Windows checks the disk for errors, and then Windows starts. Now run the check disk in command prompt.

Swathi B  - Microsoft Support.
Visit our
Microsoft Answers Feedback Forum and let us know what you think.

Was this reply helpful?

Yes
No

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated June 11, 2021 Views 27,296 Applies to: