Windows Events — Event ID Reference & Troubleshooting

Windows Event ID 4624 – Microsoft-Windows-Security-Auditing: An Account Was Successfully Logged On

Event ID 4624 records successful user authentication attempts in Windows. This security audit event fires whenever a user, service, or computer account successfully logs on to the system, providing detailed logon session information.

Windows Event ID 10010 – DistributedCOM: DCOM Server Process Launcher Access Denied

Event ID 10010 indicates DCOM server process launcher encountered access denied errors when attempting to start COM+ applications or services, typically due to permission issues or corrupted DCOM configurations.

Windows Event ID 10016 – Microsoft-Windows-DistributedCOM: DCOM Permission Denied Error

Event ID 10016 indicates DCOM permission issues when applications attempt to access COM components without proper authorization. This warning-level event is often benign but can indicate security configuration problems.

Windows Event ID 41 – Kernel-General: System Rebooted Without Clean Shutdown

Event ID 41 indicates Windows rebooted unexpectedly without proper shutdown. Caused by power failures, hardware issues, or critical system errors requiring immediate investigation.