Windows computer account appears to reset its own password, why?

Posted by David Yu on Server Fault See other posts from Server Fault or by David Yu
Published on 2010-04-27T23:51:02Z Indexed on 2010/04/27 23:53 UTC
Read the original article Hit count: 550

Has anyone seen this where a computer account appears to reset its password?

The password for user 'WEST\SQLCLUSTER$' was reset by 'WEST\SQLCLUSTER$' on 'DOMAINCONTROLLER.WEST.company.corp' at '04/23/10 20:47:41'
Event Type: Success Audit

Event Source: Security

Event Category: Account Management

Event ID: 628

Date: Friday, April 23, 2010

Time: 8:47 PM

User: WEST\SQLCLUSTER$

Computer: DOMAINCONTROLLER.WEST.company.corp

Description: User Account password set:

     Target Account Name:        SQLCLUSTER$

     Target Domain:      WEST

     Target Account ID:      WEST\SQLCLUSTER$

     Caller User Name:       SQLCLUSTER$

     Caller Domain:      WEST

     Caller Logon ID:        (0x0,0x7A518945)

© Server Fault or respective owner

Related posts about windows-server-2008

Related posts about active-directory