So, I just installed Log360 with ADAudit Plus. I am receiving an email alert with the subject 'Password Never Expire Enabled'.
The email contains the following information -
User account 'JSmith' was changed by 'NT AUTHORITY\ANONYMOUS LOGON'. Changed Attributes : 'Password Last Set'
Modified Attributes Password Last Set
Remarks A user account was changed.
Event Number 4738
---------------------------------------
My question - is this Alert profile setup incorrectly? Seems like the users password was changed, NOT set to Never Expire. Seems very misleading. Thanks for any help!