When does a client initiate a computer account password change?

  • Thread starter Thread starter gilad
  • Start date Start date
G

gilad

Hi

I need to know at what stage the client checks if the computer account
password had expired and initiates a change. does it happen during the
boot process, before a user login, after a user login or at some
arbitrary time?
Is there a way to get a notification on that password change?

Thanks,
Gilad
 
Hi

I need to know at what stage the client checks if the computer account
password had expired and initiates a change. does it happen during the
boot process, before a user login, after a user login or at some
arbitrary time?
Click to expand...

It happens at the end of the boot process (or very near the end) when
drivers & services are loaded, right before it downloads the computer
Group Policy (visually about the time the screen changes to the pretty
but blank desktop view), and before the user is allowed to (attempt)
logon.

It does it as part of the computer logon (pretty much like a user
account is checked when a user logs on) -- it has to happen then
because the network has to be fully active before it is possible and
the authentication has to happen before the GPO or the user is
allowed to logon.
Is there a way to get a notification on that password change?
Click to expand...

Nothing by default that I know about, but it MIGHT be possible
with a combination of auditing (on the property) and using an
EventTriggers to watch and alert on that event.
 
Back
Top