UltimateWindowsSecurity.com Forum / Ultimate Windows Security Forum / Security Log / 628 - User Account password set / Event ID 628 Password Reset Caller User Name not identified / Latest Posts

RE: Event ID 628 Password Reset Caller User Name not identified

RandyFranklinSmith — Tue, 19 May 2009 07:36:13 GMT

Thank you for your post. Can you tell me the exact version of Windows running on the computer that logged this event? Can you provide the 642 to which you refer? If not, do you mean that on the 642 both the target and caller user names match?

Event ID 628 Password Reset Caller User Name not identified

GFord — Sun, 17 May 2009 18:56:08 GMT

Does anyone know why we are occassionally getting 628 Password Reset events where the Caller User Name: and Caller Domain are identified by only a dash '-'.

Caller User Name: - Caller Domain: -

I know in most of these cases the password had been set by a domain user since I can find a corresponding 642 Account Changed event where the Caller User Name is identified.

Thanks

GFord