0

I am trying to debug which places (configuration files) the user credentials are mentioned in a Windows server to run various services. This is required to since password for the user changed now and the user is trying to authenticate with old password , which in turn locks the account since it is invalid credential.

I thought to check log of all users in the server (what activities are performed by users) and than filter out activities from the particular user to check which place that user is trying to authenticate.

Sumit Dobhal
  • 1

1 Answers1

-1

You probably want the Event Viewer (eventvwr.msc from "Run..") https://en.m.wikipedia.org/wiki/Event_Viewer

bobbins
  • 1
  • 1
  • Thanks for the answer but there I can't see that which service used this account and when the authentication failed. – Sumit Dobhal Aug 21 '19 at 22:19