AUDIT STAMP FOR PASSWORD CHANGES

  • Thread starter Thread starter DAWN GLOVER
  • Start date Start date
D

DAWN GLOVER

I NEED TO FIND OUT THE LAST TIME A PASSWORD WAS CHANGED
ON A NETWORK FOR A PARTICULAR USER/COMPUTER. I DO NOT
WANT TO KNOW THE PASSWORD, JUST SIMPLY THE LAST TIME IT
WAS CHANGED. I NEED THE DAY BEFORE AND TODAY'S EVENT LOG.
 
DAWN said:
I NEED TO FIND OUT THE LAST TIME A PASSWORD WAS CHANGED
ON A NETWORK FOR A PARTICULAR USER/COMPUTER. I DO NOT
WANT TO KNOW THE PASSWORD, JUST SIMPLY THE LAST TIME IT
WAS CHANGED. I NEED THE DAY BEFORE AND TODAY'S EVENT LOG.
Click to expand...

Make sure they don't have their caps lock key on when they enter the
password.
If they type like you do, or they are you, then they may have found their
problem.

And check your DC event logs... If you have the proper auditing on, you
should be able to find out when that person changed their password.

You could also log onto a DC (Domain Controller) and at a command prompt,
type in:

net user username

And it would tell you when the password was last set..
(Substitute username appropriately.)
 
Back
Top