Windows 10: Calling UAC prompt causes an event 4625 every time

That's what I discovered, after launching event viewer as an admin. They are categorized as "Microsoft Windows security auditing". I have found other matching reports online and pasted one here:

Code:

Logon type 11 supposedly is "CachedInteractive", and the description is "The domain controller was not contacted to verify the credentials", but so far I haven't been able to find a description for the status 0xC000010B.

:)

 

Event 4625 keeps happening every day at (nearly) the same time

Hi,



Thank you for writing to Microsoft Community Forums.



I understand that you are getting the Event ID 4625 on your PC at a specific time.



I have been researching on this and found some information which might be helpful for you. You can refer the article

4625(F): An account failed to log on



However, as you have mentioned that the Event ID is getting triggered at a particular time there are possibilities that a task is being executed at that time interval. I would suggest you to check the task scheduler and see if any task is executed
at that time.

1. Press Windows + S key together and type
   Task Scheduler.
   
2. Now on the left hand pane click on Task Scheduler (local).
   
3. Now under Task Status select the drop down for
   Last 24 hours/Last hour and check if any task is executing at
   1 PM.
   

Please get back to us with the detailed information to assist you further.



We await your response.



Regards,

Prakhar Khare

Microsoft Community – Moderator

 

Event 4625

event id 4625 not been logged in servers (server 2012 r2 standard) when the failed logon attempt via rdp.

 

Calling UAC prompt causes an event 4625 every time

That's what I discovered, after launching event viewer as an admin. They are categorized as "Microsoft Windows security auditing". I have found other matching reports online and pasted one here:

Code:

Logon type 11 supposedly is "CachedInteractive", and the description is "The domain controller was not contacted to verify the credentials", but so far I haven't been able to find a description for the status 0xC000010B.