In Windows 7 & Windows 8.1 (and possibly other operating systems?) when an Application Hang Error is listed in Event Viewer, is there always a couple of entries in the Event Viewer 'Security' log, listed a few seconds before the hang with these details?
- Event ID 4672. Special Logon. Audit Success. Microsoft Windows security auditing. LogonID 0x3e7.
- Event ID 4624. Logon. Audit Success. Microsoft Windows security auditing. LogonID 0x3e7. Logon Type 5.
There are many of these pairs of 4672 & 4624 events in the log, some a few hours apart some only half an hour. I'm not concerned about them, as they are like that on two seperate machines, only a few preceed an Error.
It is odd though how every time there is a application hang, on either machine, the 4672 & 4624 events are there less than a minute before the Error entry in the Application log.
Are the 4672 & 4624 'Security' events always shown just before any 'Application' errors, on other machines?
I'm wondering if the crashes are related to the 4672 & 4624 events that are listed a few seconds before.
Thanks
- Event ID 4672. Special Logon. Audit Success. Microsoft Windows security auditing. LogonID 0x3e7.
- Event ID 4624. Logon. Audit Success. Microsoft Windows security auditing. LogonID 0x3e7. Logon Type 5.
There are many of these pairs of 4672 & 4624 events in the log, some a few hours apart some only half an hour. I'm not concerned about them, as they are like that on two seperate machines, only a few preceed an Error.
It is odd though how every time there is a application hang, on either machine, the 4672 & 4624 events are there less than a minute before the Error entry in the Application log.
Are the 4672 & 4624 'Security' events always shown just before any 'Application' errors, on other machines?
I'm wondering if the crashes are related to the 4672 & 4624 events that are listed a few seconds before.
Thanks
Facebook
Twitter
Instagram