INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!

Talk With Other Members
Be Notified Of Responses
To Your Posts
Keyword Search
One-Click Access To Your
Favorite Forums
Automated Signatures
On Your Posts
Best Of All, It's Free!

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

LINK TO THIS FORUM!

Tek-Tips LinkedIn^® Group

Join our
LinkedIn^® Group!

Hook up with past and present colleagues and classmates quickly.

Partner With Us!

"Best Of Breed" Forums Add Stickiness To Your Site

(Download This Button Today!)

Feedback

"...I just wanted to say THANKS for the forum. The knowledge I gain from your site is invaluable..."

More...

Geography

Where in the world do Tek-Tips members come from?

Click Here To Find Out!

Tek-Tips Shirts!

Get your
Tek-Tips Forums
SWAG here!

Home > Forums > MIS/IT > Operating Systems - Hardware Independent > Microsoft: Windows Server 2000 Forum

Find the computer a password was changed from

Read More Threads Like This One

garyb2008 (Programmer)

17 Jun 09 10:03

Hi

We have a number of users on a windows 2000 domain who share the same user id. One of them changed the password, i since changed it back - but is there a way i can identify the computername / ip / or even an exact time that the user changed it?

This is really so we can identify exactly what happened.

Regards

Gary

itsp1965 (IS/IT--Management)

17 Jun 09 10:30

If you have object auditing enabled on your DC then you would have this information in the security log

garyb2008 (Programmer)

17 Jun 09 12:54

and if i dont have it enabled?

i just want to make sure that there wasnt a hacker/virus at work, the password was reset to blank...

itsp1965 (IS/IT--Management)

17 Jun 09 14:48

If you don't have it enabled then you won't be able to track it. Have it setup as part of securing your server for the next time something like this occurs

TechyMcSe2k (TechnicalUser)

26 Jun 09 11:43

install this plug in to get that information...but it is too late for your situation now.

http://www.computerperformance.co.uk/w2k3/utilities/acctinfo.htm

_______________________________________
Great knowledge can be obtained by mastering the Google algorithm.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Back To Forum

Back To Microsoft: Windows Server 2000