Event ID - 596

Event Id596
DescriptionA data protection master key was backed up.
Event Information According to Microsoft:
Cause :
The operating system performed a normal backup of the Data Protection application programming interface (DPAPI) master key.

If this computer is a member of a Windows NT 4.0 domain, this message might contain failure information because Windows NT 4.0 domains do not support DPAPI keys storage.
Resolution :
No user action is required.


The master key is used by the CryptProtectData and CryptUnprotectData routines, and Encrypting File System (EFS). The master key is backed up each time a new one is created. (The default setting is 90 days.) The key is usually backed up by a domain controller.
Reference LinksEvent ID 596 from Source Security

Alternate Event ID in Vista and Windows Server 2008 is 4692.

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.