Question Windows 10 Event Viewer is recording events during the night when the PC is off ?

[Paolo Folzini]

Hi,

this morning, investigating the causes of strange behavior of the BIOS of a business PC, I was analyzing the event viewer and I noticed that some events were recorded during the night hours, in moments in which I am absolutely sure that the PC was off.
Going to look in the history of events I discovered that the thing had already happened a couple of weeks ago. Furthermore, the PC time is correct and the anti-virus scans have not reported anything.
These are the last night two events:

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
IN SYSTEM

Nome registro:

System Origine: Microsoft-Windows-DistributedCOM

Data: 17/03/2023 00:04:23

ID evento: 10016 Categoria attività:Nessuna

Livello: Avviso Parole chiave: Classico

Utente: ****

Descrizione: Le impostazioni delle autorizzazioni impostazioni specifiche dell'applicazione non concedono l'autorizzazione di Attivazione in Locale per l'applicazione server COM con CLSID

IN APPLICATIONS

Nome registro: Security Origine: Microsoft-Windows-Security-Auditing

Data: 17/03/2023 00:04:17

ID evento: 4624 Categoria attività:Logon

Livello: Informazioni

Parole chiave: Controllo riuscito

Utente: ***

Descrizione: Accesso di un account riuscito.

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

Thanx for help

 

[Bob.B]

Hi,

this morning, investigating the causes of strange behavior of the BIOS of a business PC, I was analyzing the event viewer and I noticed that some events were recorded during the night hours, in moments in which I am absolutely sure that the PC was off.
Going to look in the history of events I discovered that the thing had already happened a couple of weeks ago. Furthermore, the PC time is correct and the anti-virus scans have not reported anything.
These are the last night two events:

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
IN SYSTEM

Nome registro:

System Origine: Microsoft-Windows-DistributedCOM

Data: 17/03/2023 00:04:23

ID evento: 10016 Categoria attività:Nessuna

Livello: Avviso Parole chiave: Classico

Utente: ****

Descrizione: Le impostazioni delle autorizzazioni impostazioni specifiche dell'applicazione non concedono l'autorizzazione di Attivazione in Locale per l'applicazione server COM con CLSID

IN APPLICATIONS

Nome registro: Security Origine: Microsoft-Windows-Security-Auditing

Data: 17/03/2023 00:04:17

ID evento: 4624 Categoria attività:Logon

Livello: Informazioni

Parole chiave: Controllo riuscito

Utente: ***

Descrizione: Accesso di un account riuscito.


Thanx for help

Test this.

How To - How to disable fast restart, hybrid sleep and hibernation in Windows 10

Windows has had problems with sleep and hibernation on some systems since about the time Windows 8 was introduced. Issues with hibernation and the fast restart or hybrid sleep modes have been found to create problems when the system tries to sleep, resume, restart, shut down or in some cases...

forums.tomshardware.com

 

[hotaru.hino]

Windows can wake the computer up to perform some tasks, but the computer will go back to sleep soon after. In this case, Windows wanted to do a security audit (See https://eventlogxp.com/essentials/securityauditing.html)

Also the time stamp may not be accurate until there's an event that says the system time synchronized with the hardware clock.

 

[Colif]

Almost every Windows PC on earth has DCOM errors. They are database errors. I know that wasn't point of question but it is the subject of the event you looking at.

Trying to work out problems looking in event viewer might be fruitless. Be better looking in windows error reporting