Hello John,
Do you have account management enabled in your GPO? Otherwise you can not
see it. Check for
event id 627 or
628.
Best regards
Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!!
http://www.blakjak.demon.co.uk/mul_crss.htm
| Quote: |
Hi all,
We just found out that our administrtator password was changed last
night. I am looking at security logs now. Can anyone help me how I
find out who changed the password and through which computer? any
specific ID?
Thank you!!!
|