Join Us!

Logs of changing pa...
 
Notifications
Clear all

Logs of changing password in Windows 10  

  RSS
Ricco
(@ricco)
Member

I have tried to find where is stored information of changing account password by the user in Windows 10 but no luck.
Maybe someone know where such information can be found?
Thanx for any suggestion )

Quote
Posted : 21/03/2020 5:22 pm
athulin
(@athulin)
Community Legend

I have tried to find where is stored information of changing account password by the user in Windows 10 but no luck.

Don't know about that … if you need luck to find this kind of information, there's something wrong. What sources did you try?

Windows Security event log.

Try https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/default.aspx for additional info.
You want Category Account Management, and at least the Subcategory User Account Management

Event id 4723 and 4724. 4738 is also relevant

ReplyQuote
Posted : 21/03/2020 5:59 pm
Ricco
(@ricco)
Member

Thanx a lot )

ReplyQuote
Posted : 21/03/2020 7:13 pm
keydet89
(@keydet89)
Community Legend

If the account is a local account to the system, the SAM database includes a "Password Reset Date" field.

ReplyQuote
Posted : 23/03/2020 5:28 pm
Share: