Defect has been identified 15035 - User password changed events in Change Auditor 6.9.4 record NT AUTHORITY\ANONYMOUS LOGON as the who when a password is reset.
WORKAROUND:
Uninstall the 6.9.4 agents on the DC's and install 6.9.3 or older agent to get the correct who information.
Issue has been fixed in latest version of Change Auditor.
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Feedback 使用条款 隐私 Cookie Preference Center