Windows 10: SYSTEM INTEGRITY AUDIT FAILURE Account Name: LOCAL SERVICE Account Domain: NT AUTHORITY

What does this mean?Microsoft Windows securityEvent ID: 5061Task Category: System IntegrityCryptographic operation.Subject: Security ID: LOCAL SERVICE Account Name: LOCAL SERVICE Account Domain: NT AUTHORITY Logon ID: 0x3E5Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: UNKNOWN Key Name: e004d2105e9600ca Key Type: User key.Cryptographic Operation: Operation: Open Key. Return Code: 0x80090016

:)

 

NT Service\TrustedInstaller & NT authority\system

is "NT Service\TrustedInstaller" the same thing as "NT Authority\system"? can you log into "NT Athority\system"?

i understand that "NT Service\TrustedInstaller" is not a user, i under stand that "NT Service\TrustedInstaller" is just trustedinstaller.exe with a temporary user ID.

i know that i cannot log into "NT Service\TrustedInstaller".

when i say "log into" i mean: "go into the user account and open file explorer's desktop and make it act like a normal user"

 

NT Service\TrustedInstaller & NT authority\system

i have a question about that.

if you cannot log into "NT authority\System", how do you explain the user that you go into when u press control alt del in a normal user account? i know that this keybind logs you into another user because if i use the "utilman = cmd.exe" trick and do "whoami"
it will show "NT authority\system" not my username.

can you please explain me this?

thanks for your speedy reply.

edit: when i say "utilman = cmd.exe" i mean i replaced utilman.exe with a copy of cmd.exe and i opened the cmd copy

 

Domain and Local account login

Hello,

I have an Azure joined laptop with my domain account. Also I have a local account on the laptop as well.

When I start the device, it logs into the local account first (no password on the local account so signs straight in). To get onto my domain account, I have to sign out of the local account, then go to Other User and sign into my domain account. Is there a way to have my domain account as 'default' and not log straight into my local account on startup?

Many thanks!
Jon