Event-o-Pedia EventID 4665 - An attempt was made to create an application client context.

	Event Details
	Operating System->Microsoft Windows->Built-in logs->Windows 2008 or higher->Security Log->Object Access->Application Generated->EventID 4665 - An attempt was made to create an application client context.

EventID 4665 - An attempt was made to create an application client context.

Find more information about this event on ultimatewindowssecurity.com.

Sample:

An attempt was made to create an application client context.

Subject:
	Client Name:		operations.manager
	Client Domain:		ITSS
	Client Context ID:	114002

Application Information:
	Application Name:	Microsoft Operations Manager
	Application Instance ID:	484806

Status:	0
===========================
Description template stored in adtschema.dll:
===========================
An attempt was made to create an application client context.

Subject:
	Client Name:		%3
	Client Domain:		%4
	Client Context ID:	%5

Application Information:
	Application Name:	%1
	Application Instance ID:	%2

Status:	%6

Log Type:

Windows Event Log

Uniquely Identified By:

Log Name:

Security

Filtering Field	Equals to Value
OSVersion	Windows Vista (2008) Windows 7 (2008 R2) Windows 8 (2012) Windows 8.1 (2012 R2) Windows 10 (2016)
Category	Object Access
Source	Microsoft-Windows-Security-Auditing
TaskCategory	Application Generated
EventId	4665

Field Matching

Field	Description	Stored in	Sample Value
DateTime	Date/Time of event origination in GMT format.	DateTime	10.10.2000 19:00:00
Source	Name of an Application or System Service originating the event.	Source	Security
Type	Warning, Information, Error, Success, Failure, etc.	Type	Success
User	Domain\Account name of user/service/computer initiating event.	User	RESEARCH\Alebovsky
Computer	Name of server workstation where event was logged.	Computer	DC1
EventID	Numerical ID of event. Unique within one Event Source.	EventId	576
Description	The entire unparsed event message.	Description	Special privileges assigned to new logon.
Log Name	The name of the event log (e.g. Application, Security, System, etc.)	LogName	Security
Task Category	A name for a subclass of events within the same Event Source.	TaskCategory
Level	Warning, Information, Error, etc.	Level
Keywords	Audit Success, Audit Failure, Classic, Connection etc.	Keywords
Category	A name for an aggergative event class, corresponding to the similar ones present in Windows 2003 version.	Category	Account Logon
Object Name		InsertionString1
Whom		InsertionString1
Object Type		"Application"	Application
Class Name		"Application"	Application
Security ID		-
Account Name		-
Account Domain		-
Subject: Client Name		InsertionString3	operations.manager
Subject: Client Domain		InsertionString4	ITSS
Application Information: Application Name		InsertionString1	Microsoft Operations Manager
Application Information: Application Instance ID		InsertionString2	484806
Subject: Client Context ID		InsertionString5	114002
Status		InsertionString6	0