+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Computing (https://hackforums.net/forumdisplay.php?fid=88)
+---- Forum: Microsoft Windows (https://hackforums.net/forumdisplay.php?fid=347)
+---- Thread: Windows 10 Lots of ID 4648 in Event Viewer (/showthread.php?tid=6303481)
Windows 10 Lots of ID 4648 in Event Viewer - jasonnix - Jul 19, 2025
Hello,
I have a computer that is not a member of a Windows domain and I access a folder on the file server through a shortcut and username defined in Active Directory. When I check the Event Viewer, there are a lot of ID 4648 and the username is locked in Active Directory:
https://i.postimg.cc/Kz43gnRF/PIC13.png
I unlock the username, but it gets locked again. I also checked the logs for runas.exe, but found nothing.
How do I find the problem?
Thank you.