Windows 10: Windows Event ID 5145

We are using an Event Collection and aggregator called Event Sentry to monitor file and folder access. One of the events we are collecting and reporting in Event Sentry is from the Windows Security event log, ID 5145. The issue we are having is that this event shows up in the report for some, but not all users, when they are accessing a specific network drive called "Projects" but not other network drives that we are monitoring. Specifically, it seems to create these events every hour but we cannot find any program on the source computers identified in the reports, that runs on a schedule. In

:)

 

Event ID 5145

Hi RezaAbtahi,

Thanks for the reply.

I would suggest you to post your query in the
TechNet Forums, where we have the engineers with the expertise on Event ID 5145 and can provide relevant solution to your query.

Regards,

 

Event ID 5145

Hi.

I have event id 5145 that say about share folder.the source ip of this event is ::1 that means local host.what is it for?i have a lot of this event i don t have any share folder exept admin folders.is it possible that local host access to local folder by
network?

 

Event ID 5145

Hi RezaAbtahi,



Thank you for posting your question in the Microsoft Community.



Do you see any error mark on this event?



This event generates every time network share object (file or folder) was accessed. A network share object was checked to see whether client cab (error) generate, however, I recommend you to follow this article
A network share object was checked to see whether client can be granted desired access.
Provide the even logs by clicking on copy in the event error window. So that we can research more on this issue.


Regards,