Score:-2

Windows event ID 4724 generated for password change

pk flag

Per Microsoft documentation, event id 4723 is generated when a user changes their own password using the CTRL-ALT-DELETE secure attention sequence dialog.

However, upon testing in the lab, event id 4724 is generated instead. Event id 4724 should be generated when an administrator performs a reset of the password of an account without providing the current password.

Does anyone know the reason?

https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4723 https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4724

schroeder avatar
ve flag
How exactly was the password changed?
Basem avatar
pk flag
net user * ---> then add the new password
schroeder avatar
ve flag
So, your question ***should*** be: "Is using `net user` considered to be the user "changing it themselves?"
Basem avatar
pk flag
yeah I assumed this, correct me if I am wrong
schroeder avatar
ve flag
The correction would appear to be self-evident...
Score:0
cn flag

The correct way for an end user to change their password is to use the Secure Attention Sequence (SAS), CTRL-ALT-DELETE. When presented with the security dialog, select Change Password. This will prompt the user for their old and new passwords. Other processes perform an administrative reset of the password and do not produce the desired result or event records.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.