Windows 10: NT Authority hijack persistent/embedded

I have a machine that I am not able to do much with other than to wonder whats really goin on at the other end of the constant HDD indicator light, fans spooling up/ down and is all of this to some nefarious end with the 50gb of data activity my router handled today for the latest computer that is essentially stolen but still sitting right where I left it. I was once just your average blissfully ignorant user account on one machine shopping Dodge Cummins get more power parts and watching install videos. I know there is a problem but I am unsure of how to detail the events that would be an accurate description with the relevant information a knowledgable person can extrapolate a solution from. The guys who work at the auto parts store nearby still cant help but to shake their head when I am looking to replace a doohickey bolted to that thingy but I’ve proven not to be someone that should be prevented from buying tools. No anti-virus, malware, trijan, root kit returns a detection. No method of reset, restore, recover, or fresh install clears it. I am unable to launch OEM or Windows security and assistant applications.

:)

 

NT AUTHORITY\Authenticated Users added to Users group upon every restart

I have a Windows 10 computer that I would only like certain users on a domain to be able to login to. Lets say limit access to only those users in the group named football.

I have added the football group to the Windows users group. The computer is on a domain and I noticed the following two groups both of which I removed from the Windows users group.

• NT AUTHORITY\Authenticated Users
• NT AUTHORITY\Interactive

I have tested that NT AUTHORITY\Authenticated Users is allowing users outside of the football group to login to the computer and this is not wanted.

If I remove both of these groups from the Windows users group then they will reappear upon every restart of the computer. This did not have with Windows 7. This seems to be a security problem???

 

NT AUTHORITY/SYSTEM shutdown

How do I removed this shutdown initiated by NT AUTHORITY/SYSTEM on windows 10?. It keeps showing up on my PC.

 

NT Authority will not give me access !!!!








Hi Denis,
Okay I have attached a screen shot of the NT Authority.
My box shows Performance Monitor at the top.
Enter User name for the data set. The window has NT AUTHORITY, if you drop it down then it will have both of my email addresses.
Password....
then Ok or Cancel.

On the Properties Window of the Data Collector set
General Directory Security Stop Condition Task
Description
Keywords
Run as: NT AUTHORITY [change]
OK Cancel Apply

When I log on as Admin I do so thru the Windows Admin Tools
scroll down to Performance Monitor and then right click and then select Run as Admin.
I do not go thru the Command Prompt.

This is the first time I have seen this window, never before has it done this, hence my aggravation with the situation
Thanks

It really annoys me when these things happen, I like getting the most from the system since its available