Excessive event 4673

%3CLINGO-SUB%20id%3D%22lingo-sub-2861791%22%20slang%3D%22en-US%22%3EExcessive%20event%204673%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2861791%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20the%20past%20few%20days%20my%20organization%20has%20gotten%20an%20excessive%20number%20of%20logon%20failures%20and%20we're%20reasonably%20sure%20these%20can%20be%20traced%20back%20to%20an%20excessive%20number%20of%20Event%204673s%20being%20triggered.%20It%20only%20seems%20to%20be%20affecting%20a%20small%20number%20of%20users%20and%20is%20primarily%20being%20caused%20by%20Edge%2C%20though%20a%20few%20other%20apps%20like%20Chrome%20are%20mixed%20in%20there.%20Below%20is%20the%20information%20tied%20to%20the%20event.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22WillSchmitt_0-1634659423682.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F318421iE73C8EC4BB49EB12%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22WillSchmitt_0-1634659423682.png%22%20alt%3D%22WillSchmitt_0-1634659423682.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Ewas%20there%20a%20recent%20update%20in%20Edge%20that%20triggered%20these%20and%20is%20there%20something%20I%20can%20do%20to%20reduce%20the%20reporting%20on%20these%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2861791%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EWindows%2010%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
New Contributor

In the past few days my organization has gotten an excessive number of logon failures and we're reasonably sure these can be traced back to an excessive number of Event 4673s being triggered. It only seems to be affecting a small number of users and is primarily being caused by Edge, though a few other apps like Chrome are mixed in there. Below is the information tied to the event.

WillSchmitt_0-1634659423682.png

was there a recent update in Edge that triggered these and is there something I can do to reduce the reporting on these?

0 Replies