Forum

Ultimate Windows Security Forum » Security Log » 628 - User Account password set » Event ID 628 Password Reset Caller User Name...

Event ID 628 Password Reset Caller User Name... Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
GFord
Posted 5/17/2009 6:56:08 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 5/17/2009 6:44:35 PM
Posts: 1, Visits: 0
Does anyone know why we are occassionally getting 628 Password Reset events where the Caller User Name: and Caller Domain are identified by only a dash '-'.

Eg

Caller User Name: -    Caller Domain: - 

I know in most of these cases the password had been set by a domain user since I can find a corresponding 642 Account Changed event where the Caller User Name is identified. 

Thanks

GFord

Post #91
RandyFranklinSmith
Posted 5/19/2009 7:36:13 AM
Expert

ExpertExpertExpertExpertExpertExpertExpertExpert

Group: Administrators
Last Login: 4/20/2009 7:57:33 AM
Posts: 324, Visits: 0
Thank you for your post.  Can you tell me the exact version of Windows running on the computer that logged this event?  Can you provide the 642 to which you refer?  If not, do you mean that on the 642 both the target and caller user names match?
Post #92
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 5:42am