sam auditing of password changes???

[kirk_11]

Is it possible to have sam audit password changes?

[Pete Randall]

Frankly, Kirk, I was unaware that SAM was capable of auditing anything - maybe I'll learn otherwise. You can customize SAM to perform specific things before and after adding/removing users (see Actions > Task Customization), but won't cover your password changes.


Pete

[kirk_11]

Maybe I should have asked if you can setup sam to log password changes...

[Pete Randall]

Kirk,

It sounds like you control passwords? The users are not allowed to change their own? I think you need to manually log them. That's what I do. Of course if you have several sysadmins, this can become a nightmare - I have only myself. I tried, through SAM task customization, to log the initial password and got it to work but the password is already encrypted, so I still have to go back and put in the assigned password.

Sorry, not much help!


Pete

[Ollie R]

Hi,

Try auditing code "024052", which is one of the ADMIN codes.

Ollie.

[Darren Prior · Accepted solution]

Hi,

If you have a trusted system, you could extract the date/time the password was last changed from the tcb file for a user, eg: /tcb/files/auth/u/user5

regards,

Darren.