Windows 10: Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?

Discus and support Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? in Windows Hello & Lockscreen to solve the problem; Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? Almost all are Type 5, by 0x3E7, services.exe, Workgroup.... Discussion in 'Windows Hello & Lockscreen' started by El_Dude, Oct 13, 2023.

  1. EL_DUDE
    El_Dude Win User

    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?


    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? Almost all are Type 5, by 0x3E7, services.exe, Workgroup.

    :)
     
    El_Dude, Oct 13, 2023
    #1
  2. TSOMEK
    tsomek Win User

    133 Logon Events (ID 4624) in 1 hour - should I be worried?

    I have just checked how many logons have been made on my PC (I was just curious how many hours I have been working lately) and when entering the event manager and filtering ID 4624 (which apparently is logons), I found that there were 133 entries in the last hour alone... Should I be worried?? Many thanks!
    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? 387933d1679601330t-133-logon-events-id-4624-1-hour-should-i-worried-screenshot-2023-03-23-195330.jpg

    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? 387934d1679601330t-133-logon-events-id-4624-1-hour-should-i-worried-screenshot-2023-03-23-195459.jpg
    PS Edition Windows 10 Home Version 22H2 Installed on 26/10/2020 OS build 19045.2728 Experience Windows Feature Experience Pack 120.2212.4190.0
     
    tsomek, Oct 13, 2023
    #2
  3. TRY3
    Try3 Win User
    133 Logon Events (ID 4624) in 1 hour - should I be worried?  

    I have worked on a further reduction in entries. This newly-revised Custom view only shows a single entry for each logon and a single entry for each logoff. User log on-off - reduced more.zip The entries are Logon
    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? 388017d1679761672t-133-logon-events-id-4624-1-hour-should-i-worried-logon.png
    Logoff
    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? 388018d1679761689t-133-logon-events-id-4624-1-hour-should-i-worried-logoff.png
    All the best, Denis
     
    Try3, Oct 13, 2023
    #3
  4. SHEHZADMOHYUDDIN
    ShehzadMohyuddin Win User

    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?

    Logon Event IDs Explanations

    Hi,

    I'm a non-dev person and would like some answers regarding Event Viewer in Windows 10. I wanted to keep tabs on if my PC was logged in during my absence. I found that Event ID 4624 shows the successful logins. But when I filter the ID, it turns out that

    several events are being logged and there's no way to find out which time actually a human logged in. My questions are:

    1. My Event viewer for 4624 filter looks like this: https://sc.vtedev.com/hafiz/02_10_2020_0000.png . Is this normal?

    2. If yes, how can I separate the actual human logins from these automated logs?

    3. If no, is there a malware that's causing it?

    4. Am I using wrong Event ID? If yes, can you suggest me the correct one?

    I'd really appreciate any help on this. Thanks and great day!

    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? bc42d9c8-c573-4814-86b5-c778f2596fd6?upload=true.png
     
    ShehzadMohyuddin, Oct 13, 2023
    #4
Thema:

Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?

Loading...

  1. Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? - Similar Threads - Per Event Viewer

  2. Understanding Event ID 4624

    in Windows 10 Gaming
    Understanding Event ID 4624: Hi All;Trying to understand the Event ID 4624. I found a very informative article on the MS Learn website. However, the Process ID in Event Viewer shows 0x4c8. The Decimal value shows 1224. When I look at Task Manager there is no 1224 PID. The closest POD is 1244?Thanks...

  3. Understanding Event ID 4624

    in Windows 10 Software and Apps
    Understanding Event ID 4624: Hi All;Trying to understand the Event ID 4624. I found a very informative article on the MS Learn website. However, the Process ID in Event Viewer shows 0x4c8. The Decimal value shows 1224. When I look at Task Manager there is no 1224 PID. The closest POD is 1244?Thanks...

  4. Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?

    in Windows 10 Gaming
    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?: Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? Almost all are Type 5, by 0x3E7, services.exe, Workgroup. https://answers.microsoft.com/en-us/windows/forum/all/per-event-viewer-id-4624-1600-logons-in-3-days-how/6023cd84-b525-419a-bd99-6394f14ed3e1

  5. Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?

    in Windows 10 Software and Apps
    Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible?: Per Event Viewer ID 4624: 1,600 Logons in 3 Days. How is this possible? Almost all are Type 5, by 0x3E7, services.exe, Workgroup. https://answers.microsoft.com/en-us/windows/forum/all/per-event-viewer-id-4624-1600-logons-in-3-days-how/6023cd84-b525-419a-bd99-6394f14ed3e1

  6. MANY Event ID 4624/4625 with Printers

    in Windows 10 Drivers and Hardware
    MANY Event ID 4624/4625 with Printers: Hi everyone !I have a Print Server installed on my Windows Server, with 10 printers installed on it.Then, my end-users are manually installing these printers through the Control Panel > Printers > Add a printer > Through the Active Directory. This is working.BUT I found out...

  7. Security Auditing ID: 4624/4672 Special Logon and Logon

    in Windows 10 Gaming
    Security Auditing ID: 4624/4672 Special Logon and Logon: Hello, Im constantly getting this audit success every 5-10 minutes. I need help on what this is, and how can I fix it, because it freezes my computer like hardlock and goes back to normal. Here is both events Views. First is Special Logon and Second is LogonSPECIAL...

  8. Security Auditing ID: 4624/4672 Special Logon and Logon

    in Windows 10 Software and Apps
    Security Auditing ID: 4624/4672 Special Logon and Logon: Hello, Im constantly getting this audit success every 5-10 minutes. I need help on what this is, and how can I fix it, because it freezes my computer like hardlock and goes back to normal. Here is both events Views. First is Special Logon and Second is LogonSPECIAL...

  9. event id 4624

    in Windows 10 BSOD Crashes and Debugging
    event id 4624: Shutting down sky-rim, this event claims to be for old versions of windows why is it running and why is it shutting down my game? Also how do I stop it I'm running win 10 home? also 4672....

  10. Multiple Event ID 4624 in Event Viewer

    in Windows 10 Ask Insider
    Multiple Event ID 4624 in Event Viewer: Hi guys. Lets say I went out and left my laptop at home. When I come back I notice many "Audit Success" logs with ID 4624 in the Event Viewer during the time I was out. Is this something I should be concerned about and that someone has been trying to access my laptop? Thanks!...