Windows 10: Excessive logoff events ID 4634 from Guest account

Discus and support Excessive logoff events ID 4634 from Guest account in AntiVirus, Firewalls and System Security to solve the problem; Don't ask me why, but I was looking in the event viewer and noticed at there were highly frequent logoff events coming from the Guest account, like... Discussion in 'AntiVirus, Firewalls and System Security' started by questioning_user, May 1, 2020.

  1. Excessive logoff events ID 4634 from Guest account


    Don't ask me why, but I was looking in the event viewer and noticed at there were highly frequent logoff events coming from the Guest account, like once ever second. There are no associated logons, it's all logoffs, all originating from the guest account.


    I have not tried enabling the guest account. The only thing that I thought might use the guest account is O'Print, which is a printer server software that I use to print from apple devices on the network, but stopping it didn't stop this phenomenon.


    I haven't noticed any significant performance issues, but this seems really strange.


    Should I be concerned? Is there a way to track down what is causing it?


    Thanks!


    Excessive logoff events ID 4634 from Guest account [​IMG]


    Properties--all the same except Logon ID:


    An account was logged off.


    Subject:

    Security ID: ComputerName\Guest

    Account Name: Guest

    Account Domain: ComputerName

    Logon ID: 0x9378E5A



    Logon Type: 3



    This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer.

    :)
     
    questioning_user, May 1, 2020
    #1
  2. Vesao Win User

    How to remove Guest account?


    Try these steps and you should be able to delete the guest account:
    1. Press the WIN + X keys and select "Command Prompt (Admin)" from the Quick Access menu.
    2. At the Command Prompt, run this command: Code:
      Code:
      net user Guest /del
     
    Vesao, May 1, 2020
    #2
  3. tsram90 Win User
    How to remove Guest account?


    Try these steps and you should be able to disable the guest account:

    1. Press the WIN + X keys and select "Command Prompt (Admin)" from the Quick Access menu.
    2. At the Command Prompt, run this command:


    Code:
     
    tsram90, May 1, 2020
    #3
  4. maxharald Win User

    Excessive logoff events ID 4634 from Guest account

    Guest account Windows 10 Pro

    i also not view this account in Control Panel-User Accounts. so i decide enable it by self - call LsaRemoveAccountRights on Guest Sid - for remove SeDenyInteractiveLogonRight. enable account we can do from UI ( this remove USER_ACCOUNT_DISABLED flag from

    SAMPR_DOMAIN_DISPLAY_USER
    . AccountControl or if want
    UF_ACCOUNTDISABLE from NET_DISPLAY_USER.usri1_flags ). as result after logoff - i view Guest in the user list and can enter as guest. but just after logon - explorer.exe permanent crashed and restarted (desktop frequently blink) - only CTRL+ALT+DEL help
    for logoff and stop this. however eveen after this Guest not shown in Control Panel-User Accounts - only before logon - in user list
     
    maxharald, May 1, 2020
    #4
Thema:

Excessive logoff events ID 4634 from Guest account

Loading...
  1. Excessive logoff events ID 4634 from Guest account - Similar Threads - Excessive logoff events

  2. I am getting excessive User Account Management Event ID 5379 on startup

    in Windows 10 Gaming
    I am getting excessive User Account Management Event ID 5379 on startup: This causes all user activity to be prevented on start-up. This takes minutes to clear before user programs will run.No viruses or disk activity problems found. But disc activity sometimes exceeds 100%!Event log finds excessive continuous Event ID 5379.Log is as follow and...
  3. I am getting excessive User Account Management Event ID 5379 on startup

    in Windows 10 Software and Apps
    I am getting excessive User Account Management Event ID 5379 on startup: This causes all user activity to be prevented on start-up. This takes minutes to clear before user programs will run.No viruses or disk activity problems found. But disc activity sometimes exceeds 100%!Event log finds excessive continuous Event ID 5379.Log is as follow and...
  4. I am getting excessive User Account Management Event ID 5379 on startup

    in Windows 10 BSOD Crashes and Debugging
    I am getting excessive User Account Management Event ID 5379 on startup: This causes all user activity to be prevented on start-up. This takes minutes to clear before user programs will run.No viruses or disk activity problems found. But disc activity sometimes exceeds 100%!Event log finds excessive continuous Event ID 5379.Log is as follow and...
  5. Excessive "Audit Success" log events for event ID 5061 and 5058

    in Windows 10 Gaming
    Excessive "Audit Success" log events for event ID 5061 and 5058: I'm getting these 2 event IDs logged every 5 seconds in my Security log on Windows 11 Pro.This seems excessive. Also unsure why this is happening like clockwork, regardless what I'm doing on my laptop.Anyone else seeing this? Wondering whether I can/need to update my Audit...
  6. Excessive "Audit Success" log events for event ID 5061 and 5058

    in Windows 10 Software and Apps
    Excessive "Audit Success" log events for event ID 5061 and 5058: I'm getting these 2 event IDs logged every 5 seconds in my Security log on Windows 11 Pro.This seems excessive. Also unsure why this is happening like clockwork, regardless what I'm doing on my laptop.Anyone else seeing this? Wondering whether I can/need to update my Audit...
  7. Event ID 86, event ID 13, event ID 7000, event ID 8193, event ID 10005

    in Windows 10 BSOD Crashes and Debugging
    Event ID 86, event ID 13, event ID 7000, event ID 8193, event ID 10005: Hello,It's a couple of months I have this problem I think it startet around half of may after a windows update.It's not very frequent but it all starte while playing Escape from Tarkov.Basically my pc froze and I had to force restart by pressing the power button.After I...
  8. Event ID 86, event ID 13, event ID 7000, event ID 8193, event ID 10005

    in Windows 10 Gaming
    Event ID 86, event ID 13, event ID 7000, event ID 8193, event ID 10005: Hello,It's a couple of months I have this problem I think it startet around half of may after a windows update.It's not very frequent but it all starte while playing Escape from Tarkov.Basically my pc froze and I had to force restart by pressing the power button.After I...
  9. Event ID 86, event ID 13, event ID 7000, event ID 8193, event ID 10005

    in Windows 10 Software and Apps
    Event ID 86, event ID 13, event ID 7000, event ID 8193, event ID 10005: Hello,It's a couple of months I have this problem I think it startet around half of may after a windows update.It's not very frequent but it all starte while playing Escape from Tarkov.Basically my pc froze and I had to force restart by pressing the power button.After I...
  10. Excessive Security Log Events - Event ID 5379 - Windows 10

    in Windows 10 BSOD Crashes and Debugging
    Excessive Security Log Events - Event ID 5379 - Windows 10: I have been experiencing Windows Application crashes on my 3 month old Windows 10 install. While troubleshooting, I noticed that there 50+ security events each minute in the Event Viewer under Windows Logs > Security. Is this normal? The majority are Audit Success...