Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
Multiple Event ID 4703 being logged in Security Event Log
Description
The Windows Security event log is filling with Event ID 4703 on servers running the Change Auditor agent. The Change Auditor agent, NPSrvHost.exe, is the Process name.
Cause
Microsoft captures Successes and Failures of EventID 4073 "A user right token has been adjusted" and is turned on by default in the Local Auditing Policy.
Resolution
Either ignore the event or disable the Success Auditing of that event in the Local Auditing Policy:
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Recommended Content
Product(s):
Change Auditor
7.4, 7.3, 7.2, 7.1.1
Topic(s):
How To
Article History:
Created on: 8/23/2019 Last Update on: 2/11/2024
Thank you for your feedback for Topic Request
Your Request will be reviewed by our technical reviewer team and, if approved, will be added as a Topic in our Knowledgebase.
Welcome to Quest Support
You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.
Search All Articles
IE 8, 9, & 10 No longer supported
The Quest Software Portal no longer supports IE8, 9, & 10 and it is recommended to upgrade your browser to the latest version of Internet Explorer or Chrome.
