On 2014-08-09 09:27, Paul wrote:

The Razor's Edge wrote:
There seems to be an aweful lot of questions regarding this issue and a
google search has forum topics of this message but no definitive answers.

This morning while connected to the internet my machine kept beeping me
every few seconds. At first I thought it was a bad connection with a USB
device connecting and disconnecting but a review of the event log showed
multiple instances of this message.

Anyone know (DIFINITIVELY) what the hell this is all about?

Giovanni

Some people have noticed trigger conditions, here.

http://www.eightforums.com/system-se...-4797-a-5.html

"Anytime i opened a new instance of the file explorer the 4797 logged.
Just browsing the files system did not prompt any new 4797 logs until
I closed the explorer and opened a fresh instance."

"I have noticed that this is related to doing a
refresh in Windows File Explorer."

"...Audit Mode"

If you were in that "Audit Mode", there would likely
be other visual hints. As well as behavioral problems.
So something is auditing, but not necessarily Audit Mode.

*******

OK, try this thread.

"Auditpol - User Account Management category"

http://superuser.com/questions/77472...nk-password-fo


Paul

Must be a Win8 thing, I have "User Account Management" audited on both
success and failure and I have no trace of EventID 4797 in my Win7
security log which goes 4 months back...

--
_\|/_ Sylvain /
(o o) Member-+-David-Suzuki-Foundation-+-Planetary-Society-
oO-( )-Oo COM program murdered. "Bits everywhere" says witness.