I have a two node Windows Server 2012 R2 Standard Edition Cluster with failover sql cluster setup, User account CLIUSR is automatic has been created by failover cluster features, today noticed in event log as "
An attempt was made to reset an account's password" as below
Subject:
Security ID: SYSTEM
Account Name:<>$
Account Domain:<>
Logon ID: 0x3E7
Target Account:
Security ID: hostname\CLIUSR
Account Name: CLIUSR
Account Domain:hostname
==
When I look at the local account on both nodes, I see that password is set to never expire, and not be able to be reset
User name CLIUSR
Full Name CLIUSR
Comment Failover Cluster Local Identity
User's comment
Country/region code 000 (System Default)
Account active Yes
Account expires Never
Password last set 4/18/2016 4:32:41 PM
Password expires Never
Password changeable 4/18/2016 4:32:41 PM
Password required Yes
User may change password No
Workstations allowed All
Logon script
User profile
Home directory
Last logon 4/18/2016 4:32:41 PM
Logon hours allowed All
Local Group Memberships *Users
Global Group memberships *None
The command completed successfully.
I accept there is a process which runs every 3 minutes which is setting the CLIUSR password over and over again. The password is actually NOT being changed, it is just being set to the same value, if it false alarm can it be fixed to stop loading in event log
Thank you
An attempt was made to reset an account's password" as below
Subject:
Security ID: SYSTEM
Account Name:<>$
Account Domain:<>
Logon ID: 0x3E7
Target Account:
Security ID: hostname\CLIUSR
Account Name: CLIUSR
Account Domain:hostname
==
When I look at the local account on both nodes, I see that password is set to never expire, and not be able to be reset
User name CLIUSR
Full Name CLIUSR
Comment Failover Cluster Local Identity
User's comment
Country/region code 000 (System Default)
Account active Yes
Account expires Never
Password last set 4/18/2016 4:32:41 PM
Password expires Never
Password changeable 4/18/2016 4:32:41 PM
Password required Yes
User may change password No
Workstations allowed All
Logon script
User profile
Home directory
Last logon 4/18/2016 4:32:41 PM
Logon hours allowed All
Local Group Memberships *Users
Global Group memberships *None
The command completed successfully.
I accept there is a process which runs every 3 minutes which is setting the CLIUSR password over and over again. The password is actually NOT being changed, it is just being set to the same value, if it false alarm can it be fixed to stop loading in event log
Thank you
Pandiyan Muthuraman