4622: A security package has been loaded by the Local Security Authority.
On this page
Security packages are yet another type of plug-in that extends security functionality in Windows. MSDN defines a security package as "The software implementation of a security protocol. Security packages are contained in security support provider DLLs or security support provider/authentication package DLLs." From http://msdn2.microsoft.com/en-us/library/aa380130.aspx: Windows operating system supports authentication using security packages that function as both security support providers and as authentication packages. Security packages provide the logon process support services of a Windows authentication package and also provide authentication services to applications by implementing a set of functions that are mapped to the Security Support Provider Interface (SSPI). The security implication of event 4622 realistically, is low. Although a rogue package could cause great harm by stealing credentials at the time of logon, the effort required in developing and installing a rogue security package is significant.
Centrally manage WEC subscriptions.
Free.
A security package has been loaded by the Local Security Authority. Security Package Name: C:\Windows\system32\LSASRV.dll : Negotiate
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection
Go To Event ID: Must be a 1-5 digit number No such event ID
Security Log Quick Reference Chart Download now!