The Password Policy Checking API was called
On this page
Microsoft says this is "typical behavior" and can be ignored. I concur. You may frequently see it on SQL Servers.
Free Security Log Quick Reference Chart
Top 10 Windows Security Events to Monitor
The Password Policy Checking API was called.
Security ID: SYSTEM
Account Name: WIN-R9H529RIO4Y$
Account Domain: WORKGROUP
Logon ID: 0x3e7
Caller Workstation: WIN-R9H529RIO4Y
Provided Account Name (unauthenticated): -
Status Code: 0x0
Keep me up-to-date on the Windows Security Log.
*We will NOT share this
Go To Event ID: