To my surprise the PRTGadmin account password was changed on my PRTG cluster. How can I find out who/from which machine the password was changed?

Article Comments

Hello Wouter,

Open the admin user's detail in PRTG and check the "History" tab to see if changes logged. However, if the change was performed using PRTG Admin Tool, this might not leave a trace in the history.

Since you mentioned running a cluster. Keep in mind that changes the "buitin" admin named "prtgadmin" will not sync to the failover.

Kind regards,

Erhard


Dec, 2017 - Permalink

Hello, when changing user's password trough web interface nothing is logged. Is that expected behavior and how can we track who changes password of another user account if we have multiple admin accounts?


Dec, 2020 - Permalink

Hello there,

You are right. Indeed there is no entry in the logs for this here. I noted this and will discuss it with our development. Maybe there will be a change in the future releases.


Jan, 2021 - Permalink