Password change attempt event

  • Thread starter Thread starter Saba Thayalan
  • Start date Start date
S

Saba Thayalan

I have recently noticed several events on password change
attempt (EventID:- 627) written to event log for one user.
I am sure a user trying to change password can't have
generated those number of them in a short time span.
I would be grateful , If anybody could explain this.

Thanks
Saba Thayalan
 
Look through the whole Event ID to see if a corresponding computer name is shown
which would give you information on where this attempt is coming from. --- Steve
 
You must log in or register to reply here.

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

ANONYMOUS LOGON when changing windows 2000 workstation password 2
Tsinternet user fails on password change 0
Event id 627 5
User requested change password fails 1
Event IDs 642 and 644 1
Event Viewer -- Failure Audit 627, Attempt to Change Password 2
Event 627 Failure of Change Password Attempt 8
Security Event 676, Failure Code 17 2

Back
Top