Event ID: 514

An authentication package has been loaded by the Local Security Authority 

An authentication package has been loaded by the Local Security Authority. 
This authentication package will be used to authenticate logon attempts. 

 Authentication Package Name:   %1


This event record indicates that the Local Security Authority (LSA) has loaded an authentication package used for authenticating logon requests.Authentication packages are responsible for validating user identification and authentication information collected by logon processes during log on. A single system can simultaneously support multiple authentication packages.

Microsoft Documentation

Event ID - 514



Name Field Insertion String OS Example
Authentication Package Name AuthenticationPackageName %1 C:\WINDOWS\system32\kerberos.dll : Kerberos.

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:System
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows Server 2000 Windows 2003 Windows XP

Audit Category:
System
Corresponding Events:
4610

LEFT/RIGHT arrow keys for navigation

Back to List