627: Change Password Attempt
On this page
On Windows 2000, this event gets logged for both succesful and failed attempts for both password changes (user changing his own password) or password resets when one user (caller user) attempts to change the password of another user (target user). On Windows Server 2003 this event is only logged when a user changes his own password. For password resets by administrators see event 628. This event will also be accompanied by event 642 showing that the Password Last Set date field was updated.
Load Balancing for Windows Event Collection
Change Password Attempt: Target Account Name:user Target Domain:ELMW2 Target Account ID:ELMW2\user Caller User Name:Administrator Caller Domain:ELMW2 Caller Logon ID:(0x0,0x130650) Privileges:-
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection
Go To Event ID:
Security Log Quick Reference Chart Download now!