Home / server / Questions / 136451
In Process
David Yu
Asked: 2010-04-28 15:51:02 +0800 CST

Windows computer account appears to reset its own password, why?

  • 772

Has anyone seen this where a computer account appears to reset its password?

The password for user 'WEST\SQLCLUSTER$' was reset by 'WEST\SQLCLUSTER$' on 'DOMAINCONTROLLER.WEST.company.corp' at '04/23/10 20:47:41'
Event Type: Success Audit

Event Source: Security

Event Category: Account Management

Event ID: 628

Date: Friday, April 23, 2010

Time: 8:47 PM

User: WEST\SQLCLUSTER$

Computer: DOMAINCONTROLLER.WEST.company.corp

Description: User Account password set:

     Target Account Name:        SQLCLUSTER$

     Target Domain:      WEST

     Target Account ID:      WEST\SQLCLUSTER$

     Caller User Name:       SQLCLUSTER$

     Caller Domain:      WEST

     Caller Logon ID:        (0x0,0x7A518945)
windows-server-2008 active-directory password-reset

1 Answers

  1. This is expected, normal, and good. Any computer running Windows 2000 or later will automatically change its computer account password every 30 days. This is a security mechanism. See this blog post for more info.

    • 4