The reason this Event ID is a problem is that it’s a sign that someone has or is trying to hack into your computer. To help out, we’ll show you what you can do to address this problem and beef up security.
How can someone gain access to my Windows 11 computer?
A lot of the time whenever people wonder how a hacker got into their machine, they usually think that person cracked open the computer’s tough defenses. That’s certainly possible, but the more likely reason is that your computer’s or network’s own security is rather lacking.
Your router’s firmware is out of date: Make sure to keep all of your systems up to date. Updating a router’s firmware requires you to connect it directly to your computer. Your router’s firewall is turned off: This is by far the worst gap you can have in your network’s security. Turn the firewall quickly, but be aware you have trouble accessing the router’s page. The computer is out of date: Every month, Microsoft has a Patch Tuesday where it rolls out a variety of fixes. We recommend staying up to date with those patches to protect your computer. You have too many people connected to the network: Not everyone will stay mindful of their device’s security. Perhaps you should clear out some users to keep things secure.
How can I protect my computer when Event ID 4648 appears?
The first thing you should do is check your event logs to see who is trying to gain access to your network which we show in the following solutions. After checking, there are a variety of things you can try out to ensure no actor gains access:
Turn on your firewall. That is the easiest thing that you can do. Can’t turn on Windows Firewall? Check out these fixes and get things back to normal. Download the latest Windows update, so your computer has the latest protections available. Microsoft consistently cracks them out. Limit the access people have to your network. The more people you have on the network, the higher the risk a bad actor gains access. Move the Wi-Fi router to a different part of the house. If the router is by a wall, someone from outside has an easier chance to gain access to your house network.
1. Check event logs
This solution and the next one go hand in hand. The purpose of the first is to do a bit of threat hunting, or in other words, figure out who is trying to gain access. SPONSORED
2. Remove account credentials
This solution is meant for removing users from a network that you no longer want them to have access to. External people or bad actors require another approach.
3. Change your Wi-Fi password
4. Disable Remote Access
Event ID 4648 is just one of many different warning notices on Windows 11. There are two in particular that we want to shout out specifically. The first one is Event ID 157: Disk has been surprise removed. This warning occurs when interrupts your computer’s communication with a disk and can render a virtual drive unusable. Fixing this may require you to tweak the computer’s registry a little. The other one is Event ID 7000 which indicates some software services cannot start. We recommend either making adjustments with the Group Policy Editor or restarting the offending service. Feel free to comment below if you have any questions about other Event IDs. Also, leave comments about guides that you’d like to see or information on other errors.
SPONSORED
Name *
Email *
Commenting as . Not you?
Save information for future comments
Comment
Δ
