Event ID 4672: How to Fix This Special Logon Error

This error may be prompted if there's an issue with your Event Viewer

Reading time icon 4 min. read

Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team Read more

Key notes

  • The Event ID 4672 Special logon notifies you whenever an account assigned any Administrator equivalent user rights logs on.
  • Numerous factors can cause issues with event ID 4672, causing it to malfunction.
  • Restarting the Windows Event log service and updating your BIOS often fix the error.
event id 4672

The Active Directory auditor will show you different activities and processes running on your computer in the form of Event Log IDs. The Windows Security Log Event ID 4672 is one of these event IDs. It lets you know whenever an account assigned any Administrator equivalent user rights logs on.

However, this guide will discuss the event ID 4672 from appearing recurrently on your device. Check our guide on fixing the security log is now full – Event ID 1104 on Windows 11.

What causes event ID 4672 Special Logon error?

The Event ID 4672 Special logon prompt should appear on your computer just once without interrupting your activities. Experiencing the Special logon notification popping up on your screen from time to time indicates that something is wrong with its process. Some probable causes are:

  • Issues with Event Viewer service – You can experience the event ID appearing often on your PC or why it prompts it to open due to the Event Viewer malfunctioning on your PC.
  • Issues with the GPU driver – The GPU drivers are responsible for the graphics processing of your computer, and they need to be stable for the system to work correctly. However, issues with GPU drivers can cause the Event ID to keep appearing and interrupt your work.
  • Issues with the processors on your PC – Processors provide the instructions and processing power the computer needs to do its work. So, if they are not intact or running correctly, it can affect the Active Directory event log processes on your PC.

Other factors like faulty Windows update may also cause the error. Nonetheless, we’ll guide you through fixing the Event ID 4672 Special logon error.

How can I fix event ID 4672?

Before trying any advanced troubleshooting steps, go through the following:

If you can’t fix the error, proceed with the troubleshooting steps below:

1. Restart Windows Event Log Service

  1. Press Windows + R key to open the Run dialog box, type services.msc, and press Enter.
  2. Find the Windows Event Log service in the services list, right-click on it, and select Restart from the drop-down.
  3. Restart your PC and check if you can fix the error.

Restarting the Windows Event Log service will help refresh its log and clear off event logs incorrectly logged, causing it to run into errors.

2.  Uninstall recent Windows updates

  1. Press Windows + I key to open the Settings app.
  2. Go to Windows Update and select Update history.
  3. Click the Uninstall updates button and select the most recent update.
  4. Click on Uninstall to confirm the process.

Uninstalling the recent Windows update should help fix any issue with the last build causing the error to occur. Check our guide on how to uninstall updates on Windows 11 for more steps.

3. Update your GPU drivers

  1. Press Windows + R keys to prompt the Run window, type devmgmt.msc, and click OK to open the Device Manager.
  2. Click on the drop-down button to expand the Display Adapters option. Right-click your GPU and select the Update driver option.
  3. Select Search automatically for drivers.
  4. After the update is complete, restart your device and check if the error persists.

Updating the GPU driver will fix bugs affecting them and install the latest features to improve system performance.

Check other steps for updating drivers on Windows 10 if you have any issues.

Besides updating your drivers manually, which can sometimes be not as straightforward for some users, you can opt for dedicated software to execute this action automatically.

Ensure your system performs smoothly and avoids all GPU driver errors by using a complete driver update assistant, namely Outbyte Driver Updater, that will do the job for you. Here's how to safely update your drivers:
  1. Download and install the Outbyte Driver Updater app.
  2. Launch the software and wait for the app to detect all incompatible drivers.
  3. Now, it will show you a list of all faulty drivers to select the ones to Update or Ignore.
    OutByte Driver Updater Scan
  4. Click on Update & Apply Selected to download and install the newest versions.
  5. Restart your PC to ensure the applied changes.


Keep your GPU in a flawless state without worrying about possible driver issues.
Free trial Download now
Disclaimer: You may need to upgrade the app from the free version to perform specific actions.

4. Update your BIOS

Note icon NOTE
The BIOS updating process varies on different PCs. However, the steps below are specifically for HP laptops.
  1. Go to the HP driver and software download website, select your product from the list, then input your serial number or exact computer model.
  2. Click the plus (+) button against All drivers, then click the (+) button against BIOS to expand it and see available updates, then click on Download.
  3. Double-click the downloaded file to install the .exe file, then follow the on-screen instructions to complete the installation.
  4. Restart your PC, then select the Apply Update Now option during the startup to implement the installed BIOS update.

Updating the BIOS will fix the Event ID 4672 Special logon error and enhance system stability. You can check our guide on how to check and update BIOS on various laptops.

Alternatively, our readers may be interested in fixing the Event Viewer reboot event ID error in Windows 11.  Also, we have a detailed guide on fixing application popup event ID 1060 on Windows 11.

In conclusion, this article should help you troubleshoot event ID 4672. If you have further questions and suggestions, kindly drop them in the comments below.

More about the topics: event log viewers