Excessive Windows 10 Audit Failures from chrome.exe, teams.exe or edge.exe

Augusto Alves 20 Reputation points
2023-12-26T18:18:31.0233333+00:00

Hello,

I have thousands of audit failure events (4673) in my local Windows event security log.

They all come from Chrome.exe, Teams.exe, Edge.exe and etc.

Thousands of audit failures from them.

The computers are on the latest Windows 10 feature update.

They are domain members and we use a domain user to log in and use them.

All applications are installed in this same user context, and I get audit failures when something tries to authenticate/escalate privileges.

Does anyone else have this problem?

Any solution out there?

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,923 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,395 questions
{count} votes

Accepted answer
  1. Thameur-BOURBITA 32,606 Reputation points
    2023-12-26T19:15:33.8433333+00:00

    Hi @Augusto Alves

    I think The thread below is talking about the same issue.

    Following to the microsoft feedback in the link below,it's a known issue and you can ignore it .

    You can try to contact again Microsoft to confirm if there is a fix for this event:

    Excessive Windows 10 Audit Failures from chrome.exe, teams.exe or edge.exe


    Please don't forget to accept halpful answer


1 additional answer

Sort by: Most helpful
  1. Karlie Weng 15,451 Reputation points Microsoft Vendor
    2023-12-27T02:28:57.39+00:00

    Hello,

    Take a close look at the audit failure events to find any error messages or specific information that can help identify what's causing the authentication and privilege escalation issues.

    However, there are some common reasons that are often associated with audit failures during authentication attempts.

    • Incorrect or expired credentials used for authentication.
    • Issues with the synchronization of domain accounts.
    • Service accounts lack necessary privileges.
    • Problems with network connectivity or DNS resolution impacting domain communication.
    • Malicious software attempting unauthorized actions, triggering audit failures
    0 comments No comments