Password change attempt event

  • Thread starter Thread starter Saba Thayalan
  • Start date Start date
S

Saba Thayalan

I have recently noticed several events on password change
attempt (EventID:- 627) written to event log for one user.
I am sure a user trying to change password can't have
generated those number of them in a short time span.
I would be grateful , If anybody could explain this.

Thanks
Saba Thayalan
 
Look through the whole Event ID to see if a corresponding computer name is shown
which would give you information on where this attempt is coming from. --- Steve
 
Back
Top