We have several problems here:

1. No SAM db with Windows 2000, there is Active Directory DB instead, and
it's not that easy to hack into.
2. Keeping the list of users' passwords is reeeal bad security practice. Do
you really want a single person to know all passwords for all user accounts?
Besides, if you want to track password changes, you will still be unable to
get the new password value
3. (actually not a problem at all). You CAN audit various security-related
events, including password change events. For complete list of acual event
ids, refer to Appendix E - Security Event Messages of Windows XP
Professional resource kit (applies mostly to W2k as well, and it's the
freshiest one as to my knowledge) at

http://www.microsoft.com/technet/pro...f_msg_efgd.asp

--
Dmitry Korolyov [d__k@removethispart.mail.ru]
MVP: Windows Server - Active Directory


"Kpasutto" <kpasutto@yahoo.com> wrote in message
news:8pgKb.82353$6b2.17738@edtnps84...
Hi all, I help administer a company with about a 90 users. Is there a
utility out there that can notify me by email or something when users
change
their passwords on our Windows 2000 servers. I would like to keep a user
password list updated and current all the time. I can allways hack into
the
sam to get them but this is a pain in the butt to do when I need to get a
password because someone forgot it after they changed it.

Thx in advance
Kerry