Event ID 5632

A request was made to authenticate to a wireless network.

A request was made to authenticate to a wireless network.

Subject:
    Security ID:        %2
    Account Name:       %3
    Account Domain:     %4
    Logon ID:       %5

Network Information:
    Name (SSID):        %1
    Interface GUID:     %8
    Local MAC Address:  %7
    Peer MAC Address:   %6

Additional Information:
    Reason Code:        %9 (%10)
    Error Code:       %11
    EAP Reason Code:        %12         
    EAP Root Cause String:      %13
    EAP Error Code:      %14


This event generates when 802.1x authentication attempt was made for wireless network.

It typically generates when network adapter connects to new wireless network.

Auditing:     Conditional


Volume:     Low Medium

Medium to High


Microsoft Documentation

Event ID - 5632



Name Field Insertion String OS Example
Name (SSID) SSID %1 Any Nokia
Security ID Identity %2 Any redmond.corp.microsoft.com
Account Name SubjectUserName %3 Any -
Account Domain SubjectDomainName %4 Any -
Logon ID SubjectLogonId %5 Any 0x0
Peer MAC Address PeerMac %6 Any 18:64:72:F3:33:91
Local MAC Address LocalMac %7 Any 02:1A:C5:14:59:C9
Interface GUID IntfGuid %8 Any {2BB33827-6BB6-...}
Reason Code ReasonCode %9 Any 0x0
Reason Code ReasonText %10 Any The operation was successful
Error Code ErrorCode %11 Any 0x0
EAP Reason Code EAPReasonCode %12 Any 0x0
EAP Root Cause String EapRootCauseString %13 Any
EAP Error Code EAPErrorCode %14 Any 0x0


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Other Logon/Logoff Events"



LEFT/RIGHT arrow keys for navigation

Back to List