Windows 10: Suspicious Log On In Windows Security Logs And Several Event 5379

I checked log on activities and saw some weird log on with security ID : NULL SID, what does this mean? And there also a bunch of events 5379 saying that credentials manager were read some of them has defaultuser0 name other is my desktop name. Should i factory reset this computer to get rid of them?

:)

 

Excessive Security Log Events - Event ID 5379 - Windows 10

I'm having the same problem. The system was fine last November and sat for about four months. When I turned it on last night, after all updates were applied and Outlook was downloading emails, the "freezing" issue started. After rebooting it stopped and I was hoping it was a one-time deal. After using the system for about 5 hours today, it started up again. Last night I was able to still use the computer, albeit very difficult. Today I wasn't even able to close windows (I think I managed to get two before I gave up and hit CTRL+ALT+DEL). The system was back to being normal/responsive after the ctrl/alt/del screen appeared (no idea what it's called). I logged out, forced applications to shut down (the shutdown process took a bit longer than usual), logged back in and the problem persisted. I rebooted the computer and the issue stopped.

I decided to take a peak in the Event Viewer since the issue seems bizarre. I, too, found many 5379 events. I usually don't even bother with the Event Viewer because of the plethora of events that tend to be logged in there. However, in this case, I think the 5379 events ARE significant. Looking at the time stamps, they began occurring around the same time the freezing issue began. I tried to use the computer while the issue was happening for about ten minutes and there were eight pages (around 130 entries) of 5379 events occurring within seconds of each other.

The same seems to be true from last night. There was a handful of 5379 events when I first logged in but during the first five hours of use there weren't hundreds of them, so... I'm off to search for more answers on this. Will come back here if I find one.

 

Excessive Security Log Events - Event ID 5379 - Windows 10

i had ex[eriences like that last night - my laptop so slowly

 

Excessive Security Log Events - Event ID 5379 - Windows 10

@RemoteComputerTechnician as you have posted several "solutions" on here, that have only turned out to NOT change the issue, I would respectfully suggest that you THOROUGHLY test any and ALL changes that you try, for at least 1 to 2 weeks, before posting them on here, as it may cause confusion, and if users try these, it might cause them issues if they no not have the proper skills to do it properly, and be unable to revert a bad change.

As I have posted on here a few times, these 5379 Audit Success event logs are a NORMAL part of the Microsoft Security reporting "system", and do NOT signify a problem that any users need to fix, and there is NO PROBLEM with their hardware or software, and NO rogue processes running doing bad stuff.

Many enterprise users actually WANT auditing events, that is why they are there, HOWEVER, most regular users do NOT want this (as it can be excessive), and ideally, Microsoft should be providing a setting for Windows 10 Home and Pro users to be able to turn this OFF.

Maybe those who aggree with that, should be posting that suggestion in the Feedback Hub, and vote up any others who have done this.

For users getting freezes, and game-play lags, performance issues, should NOT look here for a solution, as these 5379 events have NOTHING to do with that.

It may well be the other well posted problem of long run times for the scheduled runs of WaasMedic and CompatTelrunner services.