Source: Security Event ID: 672 (Windows Operating System 5.0) - Technet Events And Errors Message Center: Message Details

	You can find additional information on this topic in the following Microsoft Knowledge Base articles:
	• TechNet Security Center
	Find Microsoft resources including security updates, libraries, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain computer security.
	• Microsoft Security
	Find Microsoft Security resources including the latest in Computer Security, available Scan and Products, get Security Updates and view our Security Centers.
	• Windows Defender Solution Center
	Start here when Windows Defender is not working how you expected. Download the latest updates and look up top issues, error messages, and troubleshooting tips. Still have questions? Get help from a discussion group or support professional.
	• Security Essentials Solution Center
	Start here to get answers to your questions about Security Essentials. Look up Key Resources or Ask the Community. Explore your Self Support Options to look up top issues, error messages or troubleshooting tips. Still have questions? Submit a case using Assisted Support.
	• Virus and Security Solution Center
	Start here to get answers to your questions about Virus and Security. Look up Key Resources or Ask the Community. Explore your Self Support Options to look up top issues, error messages or troubleshooting tips. Still have questions? Submit a case using Assisted Support.
	• Windows 2000 Security Event Descriptions (Part 2 of 2)
	This article contains descriptions of various security-related and auditing-related events, and information about how to interpret these events. These events will all appear in the Security event log and will be logged with a source of "Security."...
	• Security Event for Associating Service Account Logon Events
	In Windows 2000 and earlier versions of Windows, it was not possible to associate an account logon event (security event ID 528) with a process creation event for many processes, such as services. However, an administrator can use security event ID 600...