A password change is a user action, whereas a password reset is an administrative action. The Security Center continuously monitors the status of client-side security services such as Windows Firewall and Automatic Updates settings. A user's authenticating DC is listed in the environment variables that are available in a user's logon session. Windows Server 2003 includes the Last-Logon-TimeStamp attribute that contains the approximate value of the last logon time of a user.
Jan De Clercq’s Windows Gatekeeper Q&A column replaces Randy Franklin Smith’s Access Denied in Security Pro VIP.