Windows 8 and 8.1 Forums

Event ID 4797

  1. #41


    Posts : 79
    Windows 10 Pro 64-bit


    Quote Originally Posted by DrHaze View Post
    Yea is this a new feature that even Microsoft won't comment on in their own forums...
    61 times..hundreds in weeks? My moms windows 8 home is even doing it. It's definitely solely related to windows 8 that i can see any Windows 7 users out there with 4797's??????????
    I checked Dad's Windows 7 Home Premium. Not a single 4797 in it.
    I have a Win 7 Home Prem laptop and no 4797's either. It appears to be Win 8 specific.

      My System SpecsSystem Spec

  2. #42


    Posts : 26
    Windows 8 X64 Pro
      My System SpecsSystem Spec

  3. #43


    Posts : 2
    Win 8


    I have a brand new laptop (10 days old) with this issue. The laptop is running like a dog which is what prompted me to start looking through the logs in the first place. Apps are constantly being reported as "not responding". The only software I have installed so far is Mozilla Thunderbird email client and Chrome browser. I am going to have to uninstall Chrome as it is completely unusable now despite being fine for the first few days. This error started 4 days ago which is when I first noticed these performance errors. Unlikely to be a coincidence I would say. I am running Norton Internet Security.
      My System SpecsSystem Spec

  4. #44


    Posts : 26
    Windows 8 X64 Pro


    What brand of laptop have you paid for that Norton security yet?
      My System SpecsSystem Spec

  5. #45


    Posts : 2
    Win 8


    Quote Originally Posted by DrHaze View Post
    What brand of laptop have you paid for that Norton security yet?
    This is a Samsung NP350VC. Since yesterday's post I have realised the issue has been going on since the day I got it - must have had the logs filtered yesterday. Norton is still on the 60 day trial. Really disappointed with this laptop so far. My work laptop (Win 7) has a lower spec cpu and less RAM but runs rings around this thing.
      My System SpecsSystem Spec

  6. #46


    Posts : 26
    Windows 8 X64 Pro
      My System SpecsSystem Spec

  7. #47


    Posts : 26
    Windows 8 X64 Pro


    Quote Originally Posted by NKF View Post
    Quote Originally Posted by DrHaze View Post
    What brand of laptop have you paid for that Norton security yet?
    This is a Samsung NP350VC. Since yesterday's post I have realised the issue has been going on since the day I got it - must have had the logs filtered yesterday. Norton is still on the 60 day trial. Really disappointed with this laptop so far. My work laptop (Win 7) has a lower spec cpu and less RAM but runs rings around this thing.
    I would uninstall everything that is not needed. and go with www.avast.com antivirus. not Symantec. Avast Is Free.
    Alot of times there is Excessive software (Known As Bloatware) installed on new name brand name retail laptops/pc's that make run very slow/crawl.
      My System SpecsSystem Spec

  8. #48


    Posts : 2
    Windows 8 Pro


    Hey guys I have been having the same problems with this stupid 4797 event. It was happening all the frikkin time. I played with some Local Policy Settings in the group policy editor and now these events only occur during logon (Which I think they are supposed to any way based on the policy).

    Local Computer Policy -> Windows Settings --> Account Policies --> Password Policy --> Minimum Password Length - default "0"
    (I switched this to 5, anything but 0)


    Local Computer Policy -> Windows Settings --> Account Policies --> Local Policies --> Security Options -> Accounts: Limit Local Use of Blank Passwords to console logon only - Default - "Enabled"
    (I switched this to disabled)

    for what ever reason the security events have stopped, I only see them during logon and that is it. not every minute for days...

    I hope this helps, maybe its just a buggy policy that Microsoft needs to address, I dont know
    Last edited by xolos9; 14 Feb 2013 at 01:46.
      My System SpecsSystem Spec

  9. #49


    Posts : 2
    Windows 8 Pro


    Quote Originally Posted by xolos9 View Post
    Hey guys I have been having the same problems with this stupid 4797 event. It was happening all the frikkin time. I played with some Local Policy Settings in the group policy editor and now these events only occur during logon (Which I think they are supposed to any way based on the policy).

    Local Computer Policy -> Windows Settings --> Account Policies --> Password Policy --> Minimum Password Length - default "0"
    (I switched this to 5, anything but 0)


    Local Computer Policy -> Windows Settings --> Account Policies --> Local Policies --> Security Options -> Accounts: Limit Local Use of Blank Passwords to console logon only - Default - "Enabled"
    (I switched this to disabled)

    for what ever reason the security events have stopped, I only see them during logon and that is it. not every minute for days...

    I hope this helps, maybe its just a buggy policy that Microsoft needs to address, I dont know

    Ok so It started happening again, though it hadn't all day after I changed the settings in the local policies. but I just watched Netflix and surfed the web. This told me it was just a coincidence. So I decided to try and hunt down what was prompting it.

    With a clean desktop in the event viewer open I would do things and see if the 4797 showed up.

    I found this.

    Anytime i opened a new instance of the file explorer the 4797 logged. Just browsing the files system did not prompt any new 4797 logs until I closed the explorer and opened a fresh instance.

    I opened up Word and as soon as it needed to access the file system either to save or retrieve a file the 4797 logged.


    Why the hell does Windows 8 run this audit check when accessing the files? I'm done ****ing with it for now. Hopefully Microsoft will address this at some point. At least I can pretty much say it doesn't appear to be malicious or external. Its Windows being a dumb ass. Or there's a genius reason for it and I just don't get it..
    Last edited by xolos9; 14 Feb 2013 at 01:47.
      My System SpecsSystem Spec

  10. #50


    Sunnyvale, CA USA
    Posts : 283
    Windows 8.1 Pro with Media Center (64-bit)


    I have noticed that this is related to doing a refresh in Windows File Explorer.

    Try this:

    Load Nirsoft 'MyEventViewer' to monitor the events.

    Open File Explorer.

    Right click and select Refresh.

    Every time I do this I immediately see two events:

    1) An attempt was made to query the existence of a blank password for an account.

    Subject:
    Security ID: xxxxxxxxxxxxxxxxxxx
    Account Name: Jim
    Account Domain: Morbius
    Logon ID: xxxxxxxxxxxx


    Additional Information:
    Caller Workstation: MORBIUS
    Target Account Name: Administrator
    Target Account Domain: Morbius

    2) An attempt was made to query the existence of a blank password for an account.

    Subject:
    Security ID: xxxxxxxxxxxxxxxxxxx
    Account Name: Jim
    Account Domain: Morbius
    Logon ID: xxxxxxxxxxxxxx


    Additional Information:
    Caller Workstation: MORBIUS
    Target Account Name: Guest
    Target Account Domain: Morbius
      My System SpecsSystem Spec

Page 5 of 6 FirstFirst ... 3456 LastLast
Event ID 4797
Related Threads
Event Viewer - Event Log Online Help in Performance & Maintenance
Hi, I am new to the forum and have searched to see if I can find a fix for my issue. My issue is whenever I use the Event Log Online Help link in any Event Notification all I get is transferred to this page Page Not Found I am new to Windows 8 but I used this service regularly with XP. I...
keep getting it logged as an error. I have gone into Adjust Date and Time\Internet Time\and it is set to automatically synchronize with time.windows.com and on a scheduled basis. When I try to update or change the setting I get an error message that an error occurred while windows was...
Event ID 219 in General Support
Hi, I am getting this error every time I turn on my computer. From Event Log: The driver \Driver\WUDFRd failed to load for the device ROOT\SYSTEM\0001. - System
While playing war thunder on steam my screen went black and i couldn't do anything. I restart my computer and play again it crashes. After one more time i look at my event viewer and find critical error event ID:41. I don't whether its the game or my pc.
event viewer EVENT 14 HAL. What is it ? in Performance & Maintenance
Hello. I'am unable to find any information regard one entry in event viewer (eventvwr.msc) EVENT ID is 14, Source Microsoft-Windows-HAL screens: http://i.imgur.com/mot50EK.jpg http://i.imgur.com/EKoELpO.jpg?1 It stays, somethink like. system was limited to the periodic cycle due to...
I've noticed an intriguing event in Event viewer... Log Name: Application Source: Microsoft-Windows-Security-SPP Date: 25. 1. 2013. 8:13:00 PM Event ID: 8208 Task Category: None Level: Error Keywords: Classic User: N/A
Event 98 in Drivers & Hardware
Hi, I'm having a problem with an error that gets logged when I startup or restart. Volume HDDRECOVERY (\Device\HarddiskVolume3) needs to be taken offline to perform a Full Chkdsk. Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via...
Eight Forums Android App Eight Forums IOS App Follow us on Facebook