Endpoint Protection Small Business Edition

 View Only
Expand all | Collapse all

Excessive & Multiple Event ID 4673 on Event Viewer Security logs

  • 1.  Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 12, 2017 06:39 AM

    How can we stop the below issue.

     

    A privileged service was called.

    Subject:
        Security ID:        XXX
        Account Name:        XXX
        Account Domain:        XXX
        Logon ID:        0x8CA1B

    Service:
        Server:    Security
        Service Name:    -

    Process:
        Process ID:    0x1b04
        Process Name:    C:\Program Files\Symantec.cloud\EndpointProtectionAgent\12.1.7166.6700.105\Bin\ccSvcHst.exe

    Service Request Information:
        Privileges:        SeTcbPrivilege

     

     

    we have already updated to the latest SEP Small Business Edition. - No more updates.

    Still we are getting the above on the server causing accounts to be locked out daily.



  • 2.  RE: Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 12, 2017 12:02 PM

    This was supposed to be fixed in RU6 MP4:

    https://www.symantec.com/connect/forums/excessive-multiple-event-id-4673-event-viewer-security-logs

    The version you're on is RU6 MP7. You're still seeing this because it's a code fix.



  • 3.  RE: Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 12, 2017 09:15 PM

    Hi ℬrίαη,

    What do you mean? How may i have it resolve? 



  • 4.  RE: Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 12, 2017 09:20 PM

    The version that you're currently running should've contained the fix. 

    I would suggest opening a case.



  • 5.  RE: Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 12, 2017 09:37 PM

    You're welcome.



  • 6.  RE: Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 12, 2017 09:37 PM

    noted, thank you.



  • 7.  RE: Excessive & Multiple Event ID 4673 on Event Viewer Security logs

    Posted Jun 13, 2017 10:12 PM

    No response from Symantec.