By going to My computer > Manage > Windows logs > System
sample :
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
- <event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <system>
<provider name="Schannel" guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}"></provider>
<eventid>36887</eventid>
<version>0</version>
<level>2</level>
<task>0</task>
<opcode>0</opcode>
<keywords>0x8000000000000000</keywords>
<timecreated systemtime="2020-06-24T11:11:19.605779900Z"></timecreated>
<eventrecordid>23263</eventrecordid>
<correlation></correlation>
<execution processid="456" threadid="8680"></execution>
<channel>System</channel>
<computer>x</computer>
<security userid="S-1-5-18"></security>
</system>
- <eventdata>
<data name="AlertDesc">46</data>
</eventdata>
</event>
searching the registry for 1F678132-5938-4686-9FDC-C8FF68F15C85, you landed HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\services\eventlog\System**Schannel**
disable the Schannel logging by setting EventLogging=0, add this to registry
1
2
3
4
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
"EventLogging"=dword:00000000
EventLogging possible values :
1
2
3
4
5
6
7
8
9
Hex Decimal Description
0x0000 0 Do not log
0x0001 1 Log Error messages
0x0002 2 Log Warnings
0x0003 3 Log Error and Warning messages
0x0004 4 Log Informational and Success events
0x0005 5 Log Error, Informational and Success events
0x0006 6 Log Warnings, Informational and Success events
0x0007 7 Log Everything (Warnings, Errors, Informational and Success events
ref https://forums.iis.net/t/1168770.aspx
https://forums.ivanti.com/s/article/Error-SCHANNEL-1203-EventID-36888-Errors-Flooding-System-Event-Logs
Regarding Schannel, it’s one of the Security Support Providers. The Windows operating system implements the TLS/SSL protocols as a Security Support Provider SSP, a dynamic-link library (DLL) called Schannel that is supplied with the operating system.
https://social.technet.microsoft.com/Forums/windowsserver/fr-FR/4c5430f5-43f6-41b4-97d3-03cfb3efa70b/schannel-error-event-id-36888-is-there-a-way-to-identify-what-causes-schannel-to-log-error
origin - https://www.pipiscrew.com/?p=18554 iis-error-36887-ssl-exceptions-on-localhost