Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Log & Event Manager (LEM) > Windows 10 hosts continuously send Event ID 4703 to LEM

Windows 10 hosts continuously send Event ID 4703 to LEM

Created by Geoffrey Layton, last modified by Jason Dee on Feb 02, 2017

Views: 1,894 Votes: 2 Revisions: 9

Overview

The LEM console is being flooded by Event ID 4703 events being sent from Windows 10 agents.

Environment

  • All LEM versions
  • Windows 10 hosts

Cause

This is a new, relentless event type being sent from Windows 10-based hosts.

Resolution

You can prevent the events from being generated on the hosts themselves by disabling a specific subcategory in its audit policy.

 

Change the Authorization Policy Change subcategory to No Auditing either through the local policy or a group policy. See Audit policies and best practices for more information on adjusting audit policies.

Last modified

Tags

Classifications

Public