Windows computer account appears to reset its own password, why?
Posted
by David Yu
on Server Fault
See other posts from Server Fault
or by David Yu
Published on 2010-04-27T23:51:02Z
Indexed on
2010/04/27
23:53 UTC
Read the original article
Hit count: 550
Has anyone seen this where a computer account appears to reset its password?
The password for user 'WEST\SQLCLUSTER$' was reset by 'WEST\SQLCLUSTER$' on 'DOMAINCONTROLLER.WEST.company.corp' at '04/23/10 20:47:41'
Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 628
Date: Friday, April 23, 2010
Time: 8:47 PM
User: WEST\SQLCLUSTER$
Computer: DOMAINCONTROLLER.WEST.company.corp
Description: User Account password set:
Target Account Name: SQLCLUSTER$
Target Domain: WEST
Target Account ID: WEST\SQLCLUSTER$
Caller User Name: SQLCLUSTER$
Caller Domain: WEST
Caller Logon ID: (0x0,0x7A518945)
© Server Fault or respective owner