Re: last 3 dates when users changed password



Probably the only way you would answer this question is to search the
Security log files of all domain controllers until you find the last three
password changes.

LogParser and Eventcomb can help with this burdensome activity, but of
course you'd still need to have those archived event logs and have had
proper auditing enabled.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&familyid=8cde4028-e247-45be-bab9-ac851fc166a4

--
/kj
"sham" <shamun@xxxxxxxxxxxxx> wrote in message
news:%23ynFxP2TGHA.5148@xxxxxxxxxxxxxxxxxxxxxxx
windows 2003 active directory.how can i get the last 3 dates when users
changed password?



.