Windows computer account appears to reset its own password, why?
- by David Yu
Has anyone seen this where a computer account appears to reset its password?
The password for user 'WEST\SQLCLUSTER$' was reset by 'WEST\SQLCLUSTER$' on 'DOMAINCONTROLLER.WEST.company.corp' at '04/23/10 20:47:41'
Event Type: Success Audit
Event Source: Security
Event Category: Account Management
Event ID: 628
Date: Friday, April 23, 2010
Time: 8:47 PM
User: WEST\SQLCLUSTER$
Computer: DOMAINCONTROLLER.WEST.company.corp
Description:
User Account password set:
Target Account Name: SQLCLUSTER$
Target Domain: WEST
Target Account ID: WEST\SQLCLUSTER$
Caller User Name: SQLCLUSTER$
Caller Domain: WEST
Caller Logon ID: (0x0,0x7A518945)