596SecurityBackup of data protection master key.
Key Identifier: ab7287ab-974d-4dc7-aaaa-91e0bc96642e
Recovery Server:
Recovery Key ID:
Failure Reason: 0x3A
This audit failure event is only logged to the event log (by the DAPI) when "Detailed Tracking" is enabled in the audit policy.
Upon boot (and periodically), a domain-joined Windows XP workstation will try to connect to a domain controller through RPC to backup your master key (used for EFS, etc.).
This error is logged when a domain controller cannot be contacted. You will see this error message mostly on laptops that might need a VPN connection in order to connect to the corporate network.