Windows 10: Microsoft Windows Security Auditing Event 4624 Followed By Event 4672 Crashes Games

I have recently been having an issue where I'll be playing Rainbow Six Seige and the game will close at random. When the game closes (when I'm in the middle of playing it) there is no crash report and no report in the Application section of Event Viewer. But, when I go to the Security section of Event Viewer there is Event 4624 and 4672 followed by about 80 renditions of Event 5379. This has only been happening since the first Win 10 Update of ver 1903 up to now. I have looked everywhere for an answer and nothing has helped me. I understand this event pops up when an application tries to access sensitive information but why does my game crash?!


I am certain this issue isn't hardware related as there are no signs of a bad component. If it is any help here is a list of my hardware.


Motherboard: Gigabyte X470 Aorus Gaming 7 WIFI Rev. 1.1 running BIOS ver F31 (The issue happened on older bios version too.)

Cpu: AMD Ryzen 7 2700x running stock

Ram: 2 x 8gb G.skill trident z RGB 3600 Mhz, AMD Optimized (currently clocked @ 3466 Mhz)

Gpu: I used to have an XFX RX 580 GTS XXX but recently got an EVGA FTW3 RTX 2070 Super (Note: the issue has happened on both Graphics Cards)

Psu: Corsair cx750M

Storage: Samsung 970 EVO M.2 Nvme SSD 250gb and Samsung 860 EVO 1tb SSD


Note: All hardware runs fine and at very low temps. Cpu about 50C at average and Gpu at 58C Average. This is on Rainbow 6 @ 1440p 60Hz with Ultra settings. (I am saying this as there have been people who had the game crash and it was due to Gpu throttling and/or not enough power being provided. I do not have either of these issues.)


Any help on this issue would be very appreciated as I have been dealing with it for months and am sick of it.

:)

 

Events 4672 & 4624 Win 10 Freezes - special LOGON ?

Hi,

Thank you for writing to Microsoft Community Forums.

1. Are you on a domain network?
   
2. May I know the make and the model number of your system?
   

The event logs you have provided seems to be the security logs that is generated when you login to your system. For more information on the event that was generated, you can check
4672(S): Special privileges assigned to new logon.

The Windows error logs will be located at Event Viewer > Windows Logs > System.

Please follow the step below and check if it works for you.

Step: Improve Windows 10 Performance.

Try some of the following suggestions to help
make your Windows 10 PC run better. The steps are listed in order, so start with the first one, see if that fixes the problem, and then continue to the next one if it doesn’t.

Note: The last step on the article contains Windows Reset, I suggest you not to perform Windows reset, as there is a change your data and applications will be wiped and also
the OS will reverted back to previous version you upgraded from.

If the issue still persists, please reply to this post with more information so that we can identify the root cause of this issue and assist you further.

Hope it helps.

Amit Sunar

Microsoft Community – Moderator

 

windows 8.1 is executing winsat.exe automatically even though its disabled in task scheduler.

windows 8.1 is executing winsat.exe automatically even though its disabled in task scheduler. When Checking event viewer security logs it tells me someone logged into my computer even though I was already logged in but idle and executed winsat.exe. Is this normal or is someone logging into my computer remotely? I have multiple logins and special logins in my Log and logoffs when i did not logoff.

Audit Success 6/29/2014 5:29:03 PM Microsoft Windows security auditing. 4616 Security State Change
Audit Success 6/29/2014 5:03:25 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 5:03:25 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:13:16 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:13:16 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:03:54 PM Microsoft Windows security auditing. 4634 Logoff
Audit Success 6/29/2014 2:03:54 PM Microsoft Windows security auditing. 4634 Logoff
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:18 PM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:15 PM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 2:00:07 PM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 2:00:06 PM Microsoft Windows security auditing. 4647 Logoff
Audit Success 6/29/2014 12:55:51 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:55:51 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:43:02 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 12:16:13 PM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 12:16:13 PM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:20:53 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:20:53 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:19:04 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:19:04 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:09:04 AM Microsoft Windows security auditing. 6406 Other System Events
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:59 AM Microsoft Windows security auditing. 4797 User Account Management
Audit Success 6/29/2014 11:07:57 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:57 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:56 AM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 11:07:50 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:50 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:48 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:48 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:45 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:45 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:45 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 5024 Other System Events
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 5033 Other System Events
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:44 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4648 Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4672 Special Logon
Audit Success 6/29/2014 11:07:42 AM Microsoft Windows security auditing. 4624 Logon

 

What is event 4672?

Hi Victa

I am an independent advisor there to help

I'm sorry to hear that this has been so troublesome for you

The following Microsoft article detail exactly what this event means

https://docs.microsoft.com/en-us/windows/securi...