FAQWindows-Expert.com Forum Index  •   FAQFAQ  •  SearchSearch
Windows-Expert.com
Find Windows Problems and Solutions
 
Urgent help!
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Windows-Expert.com Forum Index -> Server Active Directory
View previous topic :: View next topic  
Author Message
John
Guest





PostPosted: Wed Mar 05, 2008 4:24 pm    Post subject: Urgent help! Reply with quote

Hi all,

We just found out that our administrtator password was changed last night.
I am looking at security logs now. Can anyone help me how I find out who
changed the password and through which computer? any specific ID?

Thank you!!!
Back to top
Guest
Guest



Posts
Location

PostPosted: Wed Mar 05, 2008 4:24 pm    Post subject: Google Ads Reply with quote

Back to top
John
Guest





PostPosted: Wed Mar 05, 2008 4:27 pm    Post subject: RE: Urgent help! Reply with quote

soory. we are in windows 2003 R2 environment.

"John" wrote:

Quote:
Hi all,

We just found out that our administrtator password was changed last night.
I am looking at security logs now. Can anyone help me how I find out who
changed the password and through which computer? any specific ID?

Thank you!!!



Back to top
Meinolf Weber
Guest





PostPosted: Wed Mar 05, 2008 8:42 pm    Post subject: Re: Urgent help! Reply with quote

Hello John,

Do you have account management enabled in your GPO? Otherwise you can not
see it. Check for event id 627 or 628.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Quote:
Hi all,

We just found out that our administrtator password was changed last
night. I am looking at security logs now. Can anyone help me how I
find out who changed the password and through which computer? any
specific ID?

Thank you!!!
Back to top
Display posts from previous:   
This forum is locked: you cannot post, reply to, or edit topics.   This topic is locked: you cannot edit posts or make replies.    Windows-Expert.com Forum Index -> Server Active Directory All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Topic Links: syslog
Powered by phpBB © 2001, 2005 phpBB Group