Submitting forms on the support site are temporary unavailable for schedule maintenance. If you need immediate assistance please contact technical support. We apologize for the inconvenience.
False positive "User password changed" and "User password changed by non-owner" events in Change Auditor
설명
False positive "User password changed" and "User password changed by non-owner" events are recorded in the Change auditor Client when the "User must Change password at next logon option" in Active Directory Users and Computers is unchecked.
원인
When the "User must Change password at next logon option" goes from selected to unselected, the pwdLastSet is changed from "Never" to a timestamp. Change Auditor detects this as a password change.
해결 방안
WORKAROUND
None
STATUS
Waiting for fix in a future release of Change Auditor.