Hi, Please help to find out the event id for "password expired" in windows 2008. Regards Sac

Hello Sac, Please find below security ID details. Hope it suits to you. Event ID: 535 Type: Failure Audit Description: Logon Failure: Reason: The specified account's password has expired User Name: %1 Domain: %2 Logon Type: %3 Logon Process: %4 Authentication Package: %5 Workstation Name: %6 Also recommend you check this article once for more details:http://support.microsoft.com/kb/174074 Regards, Ravikumar P

Hello Ravikumar, Thanks for your reply, but provided ID id not applicable for windows 2008. Regards Sac