Windows server 2008 r2 event id 4776

Event ID Follow randyfsmith. All rights reserved. Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse ultimatewindowssecurity. Terms of Use Privacy Return Policy. Operating Systems. Windows R2 and 7 Windows R2 and 8.

Come for the solution, stay for everything else. Welcome to our community! The second server is also the print server for the 1st server. I thought it could be a virus I am running malwarebytes premium on both I also ran hitman pro, dint find anything other than 2 adwares which were removed.

I am attaching a file with both event id details. It is generated on the computer where access was attempted. The Subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon. The Logon Type field indicates the kind of logon that was requested. The most common types are 2 interactive and 3 network.

The Process Information fields indicate which account and process on the system requested the logon. The Network Information fields indicate where a remote logon request originated. Try this: From a command prompt run: psexec -i -s -d cmd. Nixphoe 4, 7 7 gold badges 32 32 silver badges 50 50 bronze badges. Sign up or log in Sign up using Google.

Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Podcast Making Agile work for data science. Stack Gives Back Featured on Meta. New post summary designs on greatest hits now, everywhere else eventually. Related 1. Hot Network Questions. Question feed. Server Fault works best with JavaScript enabled.

Accept all cookies Customize settings.