Windows 10: Weird Log file in Windows Security

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 2/17/2021 8:59:47 PM
Event ID: 4798
Task Category: User Account Management
Level: Information
Keywords: Audit Success
User: N/A
Computer: <Removed>
Description:
A user's local group membership was enumerated.

Subject:
Security ID: SYSTEM
Account Name:<Removed>
Account Domain: WORKGROUP
Logon ID: 0x3E7

User:
Security ID: <Removed>
Account Name: <Removed>
Account Domain:<Removed>

Process Information:
Process ID: 0x3478
Process Name: C:\Windows\System32\svchost.exe
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="<Removed>" />
<EventID>4798</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>13824</Task>
<Opcode>0</Opcode>
<Keywords>0x8020000000000000</Keywords>
<TimeCreated SystemTime="2021-02-18T02:59:47.7647001Z" />
<EventRecordID>523322</EventRecordID>
<Correlation ActivityID="<Removed>}" />
<Execution ProcessID="1876" ThreadID="1992" />
<Channel>Security</Channel>
<Computer><Removed></Computer>
<Security />
</System>
<EventData>
<Data Name="TargetUserName">Removed</Data>
<Data Name="TargetDomainName">Removed</Data>
<Data Name="TargetSid">Removed</Data>
<Data Name="SubjectUserSid">S-1-5-18</Data>
<Data Name="SubjectUserName">Removed</Data>
<Data Name="SubjectDomainName">WORKGROUP</Data>
<Data Name="SubjectLogonId">0x3e7</Data>
<Data Name="CallerProcessId">0x3478</Data>
<Data Name="CallerProcessName">C:\Windows\System32\svchost.exe</Data>
</EventData>
</Event>


[Original Title: weird error]

:)

 

Saves log files ?

You can either read the files in Windows or my preferred method is.....

Download CCcleaner from here...........

CCleaner Professional | Try the world’s most trusted PC cleaner, free!

You can then run cleaner, you will see the log files listed, then if you right click you can save as a text file and then have a read. You may also get an "error reporting" log listed seperatly.

 

Security log


I am researching security log on my Windows 7 computer. Added column User. But this column lists


only 'N/A'. Why and how to display a real user name?

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.