Event ID: 514

An authentication package has been loaded by the Local Security Authority

An authentication package has been loaded by the Local Security Authority. 
This authentication package will be used to authenticate logon attempts. 

 Authentication Package Name:   %1
Microsoft Documentation

Event ID - 514



This event record indicates that the Local Security Authority (LSA) has loaded an authentication package used for authenticating logon requests.Authentication packages are responsible for validating user identification and authentication information collected by logon processes during log on. A single system can simultaneously support multiple authentication packages.



Name Field Insertion String OS Example
Authentication Package Name AuthenticationPackageName %1 C:\WINDOWS\system32\kerberos.dll : Kerberos.


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:System
How to enable Windows Auditing


Audit Category:
System
Corresponding Events:
4610


LEFT/RIGHT arrow keys for navigation

Back to List