Event ID 6033: LSA (LsaSrv)

  1. Posts : 136
    Windows 10 Pro

    Event ID 6033: LSA (LsaSrv)

    Today two events 6033 appeared in my events log:

    "An anonymous session connected from MY_COMPUTER has attempted to open an LSA policy handle on this machine. The attempt was rejected with STATUS_ACCESS_DENIED to prevent leaking security sensitive information to the anonymous caller.
    The application that made this attempt needs to be fixed. Please contact the application vendor. As a temporary workaround, this security measure can be disabled by setting the \HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contr ol\Lsa\TurnOffAnonymousBlock DWORD value to 1.
    This message will be logged at most once a day."

    What's going on? I ran both Malwarebyter Anti-Rootkit and Anti-Malware but nothing has been found.

    Thank you.

    UPDATE: I noticed that, both times, Sandboxie was started (manually). Maybe it's caused by Sandboxie.
    Last edited by JoeMcLutz; 13 May 2017 at 17:34.
      My Computer

  2. Posts : 3
    Windows 10 Spyware Edition

    I too am using sandboxie and I too suspected it may have been sandboxie, given it uses the user "anonamous logon"; I am not using any server, IIS or SQL software, and it tends to happen after loading firefox sandboxed. makes me curious if there is not some malware embedded in the sandbox. i never seen this before; it may be necessary to harden IPC a bit, or force sandboxie to allow only the browser, no third party exe or dll; i will contact sandboxie forum and see what they have to say.
      My Computer

  3. Posts : 136
    Windows 10 Pro
    Thread Starter

    Ok, let me know please.
    Thank You!
      My Computer


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 20:47.
Find Us

Windows 10 Forums