Im running a win2k environment w/ Active Directory.

Is their a way to determine when a client changed his
password and how often he does? Password change history?

Hi,

use this tool

.. ALoInfo.exe. Displays all user account names and the age of their
passwords.

It will show you some of desired information. It is a free download
http://www.microsoft.com/downloads/details.aspx?FamilyId=7AF2E69C-91F3-4E63-8629-B999ADDE0B9E&displaylang=en

Mike


"JR" wrote in message
news:501201c4808f$d940fc90$a501280a@phx.gbl...
> Im running a win2k environment w/ Active Directory.
>
> Is their a way to determine when a client changed his
> password and how often he does? Password change history?
>

I don't know of a way to find the history unless you have enabled auditing of account
management in Domain Controller Security Policy which would record the events in the
security log [ event ID 629 ] of the domain controller that recorded the change -
probably pdc fsmo I believe but you can use [ net user username ] on a domain
controller for a quick check of a particular user or use the free Dumpsec tool from
SomarSoft to fine when the users last changed their password by using the dump user
as a column and selecting password last set for the report. --- Steve

http://www.somarsoft.com/
http://www.microsoft.com/technet/security/guidance/secmod144.mspx -- info on auditing
and how to manage audit logs using EventComb.


"JR" wrote in message
news:501201c4808f$d940fc90$a501280a@phx.gbl...
> Im running a win2k environment w/ Active Directory.
>
> Is their a way to determine when a client changed his
> password and how often he does? Password change history?
>