Windows 10: Unexpected Audit Failure in Event Viewer

Even with years of experience with Windows operating systems I am in the unenviable position of trying to diagnose an Audit Failure in the Event Viewer for Windows 10 on my Toshiba laptop that just reared its ugly head recently.

It is perhaps noteworthy that I am not seeing the same Audit Failure on my Dell desktop. Moreover "Filtering Platform Connection" never appears.

Anyone know what causes (or triggers) the Security Task Category called Filtering Platform Connection?

Every occurrence results in an Audit Failure as shown below.


While some may want to focus on what is causing the Filtering Platform Connection failure to occur -- I am focusing instead on trying to figure out why I am getting the "Filtering Platform Connection" at all -- since it never appears on my desktop. But I've been wrong before.




:)

 

Security Audit Failure Event 5061 In Windows 10

Hello,

A failure audit event is triggered when a defined action, such as a user logon, is not completed successfully.

The appearance of failure audit events in the event log does not necessarily mean that something is wrong with your system. For example, if you configure Audit Logon events, a failure event may simply mean that a user mistyped his or her password.

https://technet.microsoft.com/en-us...s.10).aspx?f=255&MSPPError=-2147217396#BKMK_1

 

System Integrity Event 5061 Security Audit Failure

Anyone notice that with the rollup update from August 17, that the Security section of Windows Logs in Event Viewer have now all been renamed to simply "Information" instead of "Audit Failure" or "Audit Success". Ever since upgrading to Win 10, I've
been getting a lot of Audit Failures with Event ID 5061, which I presume is either related to one or more of the Nvidia drivers/programs, or is related to some other MS attempt to login to some server somewhere that fails (for reasons I've been unable to trace).
MS has been getting a lot of questions on these forums about event 5061, and apparently lots of people were alarmed about the reports of "Audit Failures" for "System Integrity", believing that it meant something was definitely wrong with their systems.

I just noticed the change in language tonight in event viewer. Now everything, and I mean all events listed under Security logs is listed as "Information". Failures still show a "lock" icon, and success shows a "gold key" icon, but the descriptions are
now simply "Information" only. You have to actually look hard to see whether it's a "failure" or "success".

Likely related, my Win10 system is unstable, and the Nvidia drivers keep crashing and recovering and then eventually crash the system. It does not seem to be at all predictable. I can be playing Solitaire, or looking at maps, or reviewing pictures in the
Bing Photo Archives, or just downloading e-mail. The computer will stay up for a day or two and then whammo. Instability, crashing and a need to continually reboot until things calm down. Oh, and throw in a couple of BSOD's too, with the message "Your
PC crashed ; (" and a report generating somewhere.

I figured Windows 10 might have some issues and I used a lot of preview builds with better luck than I'm having with a clean install of the final release version (downloaded and installed with an ISO). The machine is an older computer, running an Intel Core2
Quad processor, but it runs both Win 8.1 and Win 7 with no issues at all....I mean flawlessly. Whereas Windows 10, installed on its own partition on a clean install, is just completely unstable, and unfit at all for any production work.

 

Audit Failure reports in Event Viewer


Seems to be a common error. I get it every time on boot as well but the PC appears to be fully functioning. If yours is too, I would not worry about it. See these threads for additional info:

Event ID 5061 Audit Failure after April Update. - Windows 10 Forums
Connected Devices Platform Service - What does it do? - Windows 10 Forums