Unexpected Resetting of User Passwords

Posted on 2006-05-16
Last Modified: 2010-05-18
Over the past few weeks, there have been several of our users (approximately 5 of our primary managers) whose password has been changed without any warning.  When this happens, the users are not being prompted to change their password because their previous password has expired.  They try to log onto the network and get a message that their login name/password is incorrect.  When this happens, I (administrator) reset/change their password and they can log onto the network.  

My questions are: (1) do you have any ideas as to what may be causing this to happen and (2) is there any type of administrator log that may show who, what, when, etc. this password reset may be occurring?
Question by:mrgettys
    LVL 7

    Expert Comment

    Is this a renewing of the password or just a critical numbers of unsuccessful login attempts by an automated service remembering a previous password?   The security event log in the event viewer,  can show more what is happening.  

    Author Comment

    I'm almost certain that it's not being caused by unsuccessful login attempts.  I'll check the security event log and let you know.


    Author Comment

    The only thing that I could find in the security event log were the known times that the administrator had reset user passwords - at least for today and yesterday.  Nothing unusual showed up in the log.
    LVL 7

    Accepted Solution

    It is strange that your password resetting appears in the log but not the other resetting.  Is it possible to test the passwords by loging in,  through the use of OWA for example,  after you reset the passwords and after they became invalid?

    Author Comment

    This just happened again today for about 5 users that I know of for now.  The users received a message for the Exchange Server that said, "The logon credentials were invalid.  You must change your password before logging on for the first time."  This occurred after they had initially signed on this morning and were already accessing their applications.

    It then brought them to a screen to change their password (user name, old password, new password, confirm new password).  However, it would not allow the user to change their password here.  As the administrator, I went to the Server Management tool and reset their password.  One user rebooted his PC before I had a chance to reset his password.  The system allowed him to change his password during the reboot process and he reconnected.

    It's a strange mystery why this is occurring without any indication that the passwords will be expiring.


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
    I work for a company that primarily works with small businesses as their outsourced IT vendor. As such the majority of these customers utilize some version of Small Business Server. Due to the economics of running a small business, many of these cus…
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now