Logs of changing pa...
 
Notifications
Clear all

Logs of changing password in Windows 10

4 Posts
3 Users
0 Likes
708 Views
Ricco
(@ricco)
Posts: 52
Trusted Member
Topic starter
 

I have tried to find where is stored information of changing account password by the user in Windows 10 but no luck.
Maybe someone know where such information can be found?
Thanx for any suggestion )

 
Posted : 21/03/2020 5:22 pm
(@athulin)
Posts: 1156
Noble Member
 

I have tried to find where is stored information of changing account password by the user in Windows 10 but no luck.

Don't know about that … if you need luck to find this kind of information, there's something wrong. What sources did you try?

Windows Security event log.

Try https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx for additional info.
You want Category Account Management, and at least the Subcategory User Account Management

Event id 4723 and 4724. 4738 is also relevant

 
Posted : 21/03/2020 5:59 pm
Ricco
(@ricco)
Posts: 52
Trusted Member
Topic starter
 

Thanx a lot )

 
Posted : 21/03/2020 7:13 pm
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

If the account is a local account to the system, the SAM database includes a "Password Reset Date" field.

 
Posted : 23/03/2020 5:28 pm
Share: