Solved "Special Logon" repeats every minute in Security Event Log

During my attempt to troubleshoot some Vista behavior, I checked the logs in the event viewer. While doing that, I noticed under "Security" that the log was humongous. The reason? Every minute, there is a "Special Logon" followed by two "Logon" entries. This just keeps repeating every minute. I cleared the log and rebooted... then monitored the log and the behavior continued.

Why does this happen? Is there some kind of logging that was accidentally turned on? I can't recall what I might have done, as I had to do quite a bit of troubleshooting with another problem... is there something I can check that controls logging? I tried searching the Vista forums and didn't turn up anything matching "Special Logon".

re: "Special Logon" repeats every minute in Security Event Log

Are you able to get a Snip of the Log?

Please see http://www.vistax64.com/tutorials/148532-how-use-snipping-tool-vista.html?ltr=H For More Information

Also does the Log provide any Username?

Many Thanks,
Josh

re: "Special Logon" repeats every minute in Security Event Log

Hi Josh,

Thanks for your rapid reply. I've attached some screen shots. Below is a more information from an entry detail:



Special privileges assigned to new logon.

Subject:
Security ID: SYSTEM
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7

Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege

_____________________________________________

Notice in the screen shot that there are 73 entries showing, but there's now 97 after I've authored this post. That's a pretty quick rate.

re: "Special Logon" repeats every minute in Security Event Log

This is Normal do not fear This is the System Logging into Some Important Locations on your OS and Accessing your HDD This appears in Event Viewer to give you Some Information

Hope This Helps,
Josh

re: "Special Logon" repeats every minute in Security Event Log

Ah, OK. Thanks, Josh. I guess it just looks a bit daunting to have so many entries logged. Thankfully the interface doesn't try to load all of them when opened, so there's no lag issue.

re: "Special Logon" repeats every minute in Security Event Log

I will now mark this Thead as Solved I am glad I could help

Josh

Nice job,
Josh

Thanks Rich Sorry for the Late reply