| Event Id | 515 |
| Source | Security |
| Description | A trusted logon process has registered with the Local Security Authority. This logon process will be trusted to submit logon requests. Logon Process Name: %1 |
| Event Information | According to Microsoft: Cause : This event record indicates that a logon process has registered with the Local Security Authority (LSA). Also, logon requests will now be accepted from this source.Logon processes are trusted components responsible for collecting identification and authentication information from external devices, such as terminals and networks. They use Local Security Authority services to log these users on. A single system can simultaneously support multiple logon processes. Resolution : The person with administrative privileges for the computer should regularly verify that the authentication package being used is a valid and correct authentication package. |
| Reference Links | Event ID 515 from Source Security Alternate Event ID in Vista and Windows Server 2008 is 4611. |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.