system integrity audit failure event ID 5061
I am running both a laptop and a desktop with windows 7 pro SP1. I set both these systems up using no password and only the original user admin account as I was the only one who had or needed access to the systems. Now my situation has changed and I find the need to add a password to the my user account. Doing so causes a system integrity audit failure that I just can’t seem to figure out. The error occurs on both machines. Removing the password from the account on either machine fixes the audit failure. Without the password added to the admin account (my user account) there are no errors or in any of the windows log files listed in event viewer. Posted below will be the actual error from the log for the security audit failure. Any help on this issue would be greatly appreciated. Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 9/3/2011 6:37:37 PM Event ID: 5061 Task Category: System Integrity Level: Information Keywords: Audit Failure User: N/A Computer: Antec900-2 Description: Cryptographic operation. Subject: Security ID: Antec900-2\Dad Account Name: Dad Account Domain: Antec900-2 Logon ID: 0x41ccd Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: RSA Key Name: d166d50b-2983-40db-8f1e-2b60d429258d Key Type: User key. Cryptographic Operation: Operation: Open Key. Return Code: 0x8009000b Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" /> <EventID>5061</EventID> <Version>0</Version> <Level>0</Level> <Task>12290</Task> <Opcode>0</Opcode> <Keywords>0x8010000000000000</Keywords> <TimeCreated SystemTime="2011-09-03T23:37:37.890462600Z" /> <EventRecordID>82541</EventRecordID> <Correlation /> <Execution ProcessID="652" ThreadID="768" /> <Channel>Security</Channel> <Computer>Antec900-2</Computer> <Security /> </System> <EventData> <Data Name="SubjectUserSid">S-1-5-21-795780647-2499321743-999010372-1000</Data> <Data Name="SubjectUserName">Dad</Data> <Data Name="SubjectDomainName">Antec900-2</Data> <Data Name="SubjectLogonId">0x41ccd</Data> <Data Name="ProviderName">Microsoft Software Key Storage Provider</Data> <Data Name="AlgorithmName">RSA</Data> <Data Name="KeyName">d166d50b-2983-40db-8f1e-2b60d429258d</Data> <Data Name="KeyType">%%2500</Data> <Data Name="Operation">%%2480</Data> <Data Name="ReturnCode">0x8009000b</Data> </EventData> </Event> -------------------------------- I forgot to mention that both systems are 64bit (laptop running T660 dual core, desktop running i7 quad core extreem
September 4th, 2011 5:56am

I am running both a laptop and a desktop with windows 7 pro SP1. I set both these systems up using no password and only the original user admin account as I was the only one who had or needed access to the systems. Now my situation has changed and I find the need to add a password to the my user account. Doing so causes a system integrity audit failure that I just can’t seem to figure out. The error occurs on both machines. Removing the password from the account on either machine fixes the audit failure. Without the password added to the admin account (my user account) there are no errors or in any of the windows log files listed in event viewer. Posted below will be the actual error from the log for the security audit failure. Any help on this issue would be greatly appreciated. Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 9/3/2011 6:37:37 PM Event ID: 5061 Task Category: System Integrity Level: Information Keywords: Audit Failure User: N/A Computer: Antec900-2 Description: Cryptographic operation. Subject: Security ID: Antec900-2\Dad Account Name: Dad Account Domain: Antec900-2 Logon ID: 0x41ccd Cryptographic Parameters: Provider Name: Microsoft Software Key Storage Provider Algorithm Name: RSA Key Name: d166d50b-2983-40db-8f1e-2b60d429258d Key Type: User key. Cryptographic Operation: Operation: Open Key. Return Code: 0x8009000b Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-A5BA-3E3B0328C30D}" /> <EventID>5061</EventID> <Version>0</Version> <Level>0</Level> <Task>12290</Task> <Opcode>0</Opcode> <Keywords>0x8010000000000000</Keywords> <TimeCreated SystemTime="2011-09-03T23:37:37.890462600Z" /> <EventRecordID>82541</EventRecordID> <Correlation /> <Execution ProcessID="652" ThreadID="768" /> <Channel>Security</Channel> <Computer>Antec900-2</Computer> <Security /> </System> <EventData> <Data Name="SubjectUserSid">S-1-5-21-795780647-2499321743-999010372-1000</Data> <Data Name="SubjectUserName">Dad</Data> <Data Name="SubjectDomainName">Antec900-2</Data> <Data Name="SubjectLogonId">0x41ccd</Data> <Data Name="ProviderName">Microsoft Software Key Storage Provider</Data> <Data Name="AlgorithmName">RSA</Data> <Data Name="KeyName">d166d50b-2983-40db-8f1e-2b60d429258d</Data> <Data Name="KeyType">%%2500</Data> <Data Name="Operation">%%2480</Data> <Data Name="ReturnCode">0x8009000b</Data> </EventData> </Event> -------------------------------- I forgot to mention that both systems are 64bit (laptop running T660 dual core, desktop running i7 quad core extreem Should I be asking this question in a different forum? I have seen others asking about this issue related to application accesses that stem form newly written .net or asp applications, but not related to windows itself. If anyone else is facing this issue for the same similar reasons, please let me know.
Free Windows Admin Tool Kit Click here and download it now
September 5th, 2011 11:50am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics