windows server 2008 may have prompted for a password change

godaddy rdp windows server 2008 dedicated

does windows server ever send notices to change password

background: I was working on a project for many years but client replaced me with unskilled worker at much lower payrate who would also wear many hats and take on all the roles.
 Months later worker stated that windows server password 'send notice of password reset' and my login password was changed.

I have worked on this server for years and I have never been prompted for a password change. What does a password change look like (if password change exists).
I can log on (with new password). Is this something I could see in a log. Windows prompts user to change password.
LVL 1
rgb192Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
normally one only gets a notification in the system tray that the password will expire in 7 days or less.
0
Lionel MMSmall Business IT ConsultantCommented:
There is no mechanism in windows that send a notification (like an email I assume) to notify people to change their password. It is only prompts that users get when they logon. I am sure a script could be written to check when password are going to expire and generate an email but from the description you provided I do not think this person has the skills for that.
0
CoralonCommented:
It is not a big deal.  The next time you login, use your old password, and assuming nothing weird is going on, you'll get a prompt saying you must change your password and a screen to change it.  you'll fill in your old password, and your new password twice, and then it will change it.  Very simple..

The password expiration notification depends on the domain for the computer.  The administrators control how many days before expiration, and then depending on your login method, you will get a prompt of some form at that time frame.  Many web applications are aware of windows password changes and have their own policies for letting you know, while many others simply follow the windows password, and still more simply don't notify you and throw an error.  But, assuming a straight RDP connection, you *should* get the prompt when you try to login.

Coralon
0
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

rgb192Author Commented:
but from the description you provided I do not think this person has the skills for that.
this person may have the skills to change password
but not create a new prompt to change password every $x days.
0
Lionel MMSmall Business IT ConsultantCommented:
but not create a new prompt to change password every $x days.
agreed
So the question is then what was it? It was not the normal windows logon password change so what was it?
0
rgb192Author Commented:
So the question is then what was it? It was not the normal windows logon password change so what was it?
Maybe the other worker did a normal password change.
0
CoralonCommented:
The only way to check it is to sweep the security event logs on the domain controllers, preferably the PDC emulator (but check them all to be sure).

You'll want to check for these events in the Security logs:
627 - user changes their own password
628 - Admin changes the user password
4723 - user changes their own password
4724 - admin changes the user password

Coralon
0
rgb192Author Commented:
The only way to check it is to sweep the security event logs on the domain controllers, preferably the PDC emulator (but check them all to be sure).

You'll want to check for these events in the Security logs:
627 - user changes their own password
628 - Admin changes the user password
4723 - user changes their own password
4724 - admin changes the user password

How can I get to this screen?
0
Lionel MMSmall Business IT ConsultantCommented:
Control panel, admin tools, event viewer or click on start and type event viewer in search
0
rgb192Author Commented:
event viewer sorted by event-id ascevent viewer sorted by event-id asc

does not go lower than 4600
I do not see 4723, 4724

am I in the right place
0
Lionel MMSmall Business IT ConsultantCommented:
yes you are in the right place. if those events aren't there then something else may be wrong.  i suggest you change your password and see if that shows up in the event logs. You can also click on the security log and then in the upper right click on "FIND" and then search on the word password
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
rgb192Author Commented:
I will search. Thanks.
0
rgb192Author Commented:
I think these will work.
I have not tested yet.

thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.