Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Unexpected Resetting of User Passwords

Posted on 2006-05-16
Medium Priority
Last Modified: 2010-05-18
Over the past few weeks, there have been several of our users (approximately 5 of our primary managers) whose password has been changed without any warning.  When this happens, the users are not being prompted to change their password because their previous password has expired.  They try to log onto the network and get a message that their login name/password is incorrect.  When this happens, I (administrator) reset/change their password and they can log onto the network.  

My questions are: (1) do you have any ideas as to what may be causing this to happen and (2) is there any type of administrator log that may show who, what, when, etc. this password reset may be occurring?
Question by:mrgettys
  • 3
  • 2

Expert Comment

ID: 16690978
Is this a renewing of the password or just a critical numbers of unsuccessful login attempts by an automated service remembering a previous password?   The security event log in the event viewer,  can show more what is happening.  

Author Comment

ID: 16691227
I'm almost certain that it's not being caused by unsuccessful login attempts.  I'll check the security event log and let you know.


Author Comment

ID: 16691440
The only thing that I could find in the security event log were the known times that the administrator had reset user passwords - at least for today and yesterday.  Nothing unusual showed up in the log.

Accepted Solution

Zadkin earned 1500 total points
ID: 16696943
It is strange that your password resetting appears in the log but not the other resetting.  Is it possible to test the passwords by loging in,  through the use of OWA for example,  after you reset the passwords and after they became invalid?

Author Comment

ID: 16718284
This just happened again today for about 5 users that I know of for now.  The users received a message for the Exchange Server that said, "The logon credentials were invalid.  You must change your password before logging on for the first time."  This occurred after they had initially signed on this morning and were already accessing their applications.

It then brought them to a screen to change their password (user name, old password, new password, confirm new password).  However, it would not allow the user to change their password here.  As the administrator, I went to the Server Management tool and reset their password.  One user rebooted his PC before I had a chance to reset his password.  The system allowed him to change his password during the reboot process and he reconnected.

It's a strange mystery why this is occurring without any indication that the passwords will be expiring.


Featured Post

[Webinar] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
Screencast - Getting to Know the Pipeline
Suggested Courses

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question