Who changed Administrator password?

by Wayne Maples [Published on 20 April 2004 / Last Updated on 20 April 2004]

This can be accomplished by auditing changes on the registry key corresponding to the Administrator account. See Q173939 A closely related topic is how to Recover Lost Windows NT Administrator Password

Featured Links