SEARCH

The How-To Geek Forums Have Migrated to Discourse



Join the Discussion at discuss.howtogeek.com

How-To Geek Forums / Windows 8

Everyone Check Windows 8 Event Viewer/Security Look For ID 4797/Blank PW?

(8 posts)
  • Started 4 months ago by DrHaze
  • Latest reply from raphoenix
  • Topic Viewed 1815 times

DrHaze
DrHaze
Posts: 2

Every Windows 8 PC has this event 4797
An attempt was made to query the existence of a blank password for an account.
most PC's Have at least 20 a day. and hundreds in weeks. Microsoft Won't comment on it.
And no one knows how to stop.Brand new laptops are doing it with out ethernet!

http://social.technet.microsof.....e383e34693

http://social.technet.microsof.....ed200be5f/

http://social.technet.microsof.....1ed200be5f

http://www.eightforums.com/sys.....797-a.html

Posted 4 months ago #
Top
 
secretmechanism
Posts: 49

I brought this pc with win8 on 16th/01/13 and the event 4797 has appeared in event viewer every day including today,they all appear in blocks of about 15 to 20, 20/01/13 listed it about 50 times,other event ID's that seem to be listed throughout are 4731,4737,4732,4735,all from security group manager,also 4781,4724,4738 and including 4797 all from user account manager,just posting for reference as im not sure if the other events are linked or something else,i dont really understand event viewer, but then iv only just found the back button in win8 ;) as for event 4797 i have loads and more appearing by the day.

Posted 4 months ago #
Top
 
raphoenix
raphoenix
Posts: 14920

Appears to be a Windows 8 Software problem on some machines.

http://social.technet.microsof.....e383e34693

Posted 4 months ago #
Top
 
Fhirkin9
Fhirkin9
Posts: 179

I have somewhat older hardware (desktop) and installed the OEM/System builder as a fresh install on launch date (after having release preview with exactly zero problems). I too am seeing this in my log. <Groan!>

Posted 4 months ago #
Top
 
DrHaze
DrHaze
Posts: 2

I am still waiting for a response from Micro$oft in that technet link you have referenced there,
Check your own windows 8. I haven't seen one windows 8 yet without 4797 going on.
That's me in the link asking Micro$oft read it. no Reponse.

Posted 4 months ago #
Top
 
raphoenix
raphoenix
Posts: 14920

I'll check the logs on my installation.

Posted 4 months ago #
Top
 
raphoenix
raphoenix
Posts: 14920

I get this error in the logs frequently but don't know how to fix it.

It doesn't appear to hurt anything.

Log Name: Application
Source: ESENT
Date: 2/8/2013 9:27:13 PM
Event ID: 455
Task Category: Logging/Recovery
Level: Error
Keywords: Classic
User: N/A
Computer: ASUS50
Description:
taskhostex (1900) WebCacheLocal: Error -1811 (0xfffff8ed) occurred while opening logfile C:\Users\User\AppData\Local\Microsoft\Windows\WebCache\V010001A.log.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ESENT" />
<EventID Qualifiers="0">455</EventID>
<Level>2</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2013-02-09T03:27:13.000000000Z" />
<EventRecordID>2600</EventRecordID>
<Channel>Application</Channel>
<Computer>ASUS50</Computer>
<Security />
</System>
<EventData>
<Data>taskhostex</Data>
<Data>1900</Data>
<Data>WebCacheLocal: </Data>
<Data>C:\Users\User\AppData\Local\Microsoft\Windows\WebCache\V010001A.log</Data>
<Data>-1811 (0xfffff8ed)</Data>
</EventData>
</Event>

Posted 4 months ago #
Top
 
raphoenix
raphoenix
Posts: 14920

If I Clean all logs and reboot, the second time I don't get any errors and my Local Passwords Are Blank.

Posted 4 months ago #
Top