Login Faliure 4625 ( log on type 4)

JILIN MR 26 Reputation points
2022-06-10T15:10:23.297+00:00

Is this a legitimate process? It is happening only in one system. Could you please help me?

ActionType : LogonFailed
LogonType :Batch
ProtocolNegotiate :FailureReason
LogonServer :Unavailable
InitiatingProcessAccountDomainnt: nt authority
InitiatingProcessAccountName :system
InitiatingProcessAccountSid :S-1-5-18
InitiatingProcessTokenElevation :None
InitiatingProcessFileName :svchost.exe
InitiatingProcessCommandLine
svchost.exe -k netsvcs -p -s Schedule
InitiatingProcessFolderPath
C:\Windows\System32
InitiatingProcessParentFileName
services.exe

Windows Forms
Windows Forms
A set of .NET Framework managed libraries for developing graphical user interfaces.
1,921 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Michael Taylor 56,856 Reputation points
    2022-06-10T15:21:08.02+00:00

    Looks correct. svchost is the Windows service host from which most of the core Windows services run. It is trying to start up the Schedule service. That service appears to be using SYSTEM, which would be correct as well.

    Since this is the task scheduler it seems to me that you might have a scheduled task trying to run that is failing to run because of a login failure. You should review the scheduled tasks on the machine and see if any are failing and then fix the account being used for that task. But I'm just guessing at the possible cause here.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.