Your password was changed on a different device.

can135 1 Reputation point
2021-10-24T19:12:57.43+00:00

Hello,

One of our active directory user was notified as "Your password was changed on a different device. You must sign in to this device once with your new password and then you can sign in with PIN." on his computer's lock screen.

I have checked the DC logs, but there was not a log that shows password was changed for that user. Is there any other log that I can check?

What can be the root cause for this? As a security issue what can I do?

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,706 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,767 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Gary Reynolds 9,391 Reputation points
    2021-10-25T10:04:32.633+00:00

    Hi @can135

    Have a look at this article which will allow you to confirm if the user has changed their password or not. The meta data details will show on which DC the password was changed, and if required you can review the event log on that DC to see more details.

    Gary.

    0 comments No comments

  2. can135 1 Reputation point
    2021-10-26T20:11:14.643+00:00

    Hello,

    The user was not changed the password. Also I have logged on to all Domain controllers on my domain. There is no log about the changement.

    So may be it is about the PIN. Is there anything that you can suggest?

    Thanks.