Share via


PASSWD.LOG in C:\Windows\debug

Question

Saturday, July 29, 2017 11:05 AM

What is the PASSWD.LOG file in C:\Windows\debug folder? Just curious, because it's in use, but never contains any text.

All replies (4)

Saturday, July 29, 2017 12:09 PM ✅Answered | 1 vote

Log file for the SamChangePasswordUser2 API (used by the Change Password dialog box available after the Control-Alt-Delete sequence)

http://www.hsc.fr/ressources/articles/win_log_files/


Monday, July 31, 2017 6:21 AM ✅Answered | 1 vote

1. The passwd.log file only records the user account logon behavior, and the

password behavior, such as the password modification, and the password improperly

keyed in.

2. The passwd.log file does not record any information for the password itself. It

will not contain the password text, or encrypted password text.

3. The passwd.log file is not a secure hole of the system.

4. The passwd.log file could be removed safely from the system.

Based on my research, the Passwd.log seems only include the password change event.

No security impact.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Thursday, September 7, 2017 11:27 PM

Thanks!

Can you please provide more detail by "security hole"?


Friday, September 8, 2017 1:13 AM

Look at this MSDN article for some ideas

Definition of a Security Vulnerability

https://msdn.microsoft.com/en-us/library/cc751383.aspx

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].