windows-itpro-docs/windows/device-security/auditing/event-4615.md

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author

title	description	ms.pagetype	ms.prod	ms.mktglfcycl	ms.sitesec	author
4615(S) Invalid use of LPC port. (Windows 10)	Describes security event 4615(S) Invalid use of LPC port.	security	w10	deploy	library	Mir0sh

4615(S): Invalid use of LPC port.

Applies to

• Windows 10
• Windows Server 2016

It appears that this event never occurs.

Subcategory: Audit System Integrity

Event Schema:

Invalid use of LPC port.

Subject:

Security ID%1

Account Name:%2

Account Domain:%3

Logon ID:%4

Process Information:

PID:%7

Name:%8

Invalid Use:%5

LPC Server Port Name:%6

*Windows Local Security Authority (LSA) communicates with the Windows kernel using Local Procedure Call (LPC) ports. If you see this event, an application has inadvertently or intentionally accessed this port which is reserved exclusively for LSA’s use. The application (process) should be investigated to ensure that it is not attempting to tamper with this communications channel." *

Required Server Roles: None.

Minimum OS Version: Windows Server 2008, Windows Vista.

Event Versions: 0.

Security Monitoring Recommendations

• There is no recommendation for this event in this document.