Strange behaviour with 4624 and 4634 EventID

View thread