Windows Security Log Event ID 4694

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
 • Subcategory
Process Tracking
 • DPAPI Activity
Type Success
Corresponding events
in Windows 2003
and before
Discussions on Event ID 4694
Ask a question about this event

4694: Protection of auditable protected data was attempted

On this page

I haven't been able to produce this event. Have you? If so, please start a discussion (see above) and post a sample along with any comments you may have! Don't forget to sanitize any private information.

Free Security Log Resources by Randy

Description Fields in 4694


  •    Security ID:  %1
  •    Account Name:  %2
  •    Account Domain:  %3
  •    Logon ID:  %4

Protected Data:

  •    Data Description: %6
  •    Key Identifier: %5
  •    Protected Data Flags: %7
  •    Protection Algorithms: %8

Status Information:

  •   Status Code: %9

Supercharger Free Edition

Supercharger's built-in Xpath filters leave the noise behind.




Upcoming Webinars
    Additional Resources