Site Overlay

Who reset the User's Password on AD

Who reset the User's Password on AD

In some cases, you might want to see who changed (reset) a user's password in Active Directory.

  1. Connect to your AD server.
    (If you have two servers in your structure, ADC and PDC, you need to do the same operations separately on both servers to get the correct result, since you cannot know which AD server the user is currently logged on.)
  2. Open an event viewer window.
  3. Start a new custom filtering.
  4. Adjust the filtering settings according to items 5,6,7,8.
  5. Select by log.
  6. Select Windows Logs.
  7. Check the "Informational" events only box.
  8. Filter Event ID 4724
active directory parolayi kim sifirlamis

In the drop-down list you will be able to see which IT staff has reset the user's password