Windows Security Log Event ID 686

Operating Systems Windows 2003 and XP
CategoryAccount Management
Type Failure
Corresponding events
in Windows 2008
and Vista

686: Password of the following user accessed

On this page

This event is not confirmed

Free Security Log Resources by Randy

Description Fields in 686

  • Target User Name: %1
  • Target User Domain:  %2
  • By user:
  • Caller User Name: %3
  • Caller Domain:  %4
  • Caller Logon ID:  %5

Setup PowerShell Audit Log Forwarding in 4 Minutes


Examples of 686

Password of the following user accessed:
Target User Name:%1
Target User Domain:%2
By user:
Caller User Name:%3
Caller Domain:%4
Caller Logon ID:%5

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Upcoming Webinars
    Additional Resources