PASSWD.LOG in C:\Windows\debug RRS feed

  • Question

  • What is the PASSWD.LOG file in C:\Windows\debug folder? Just curious, because it's in use, but never contains any text.
    Saturday, July 29, 2017 11:05 AM


  • Log file for the SamChangePasswordUser2 API (used by the Change Password dialog box available after the Control-Alt-Delete sequence)

    Saturday, July 29, 2017 12:09 PM
  • 1. The passwd.log file only records the user account logon behavior, and the

    password behavior, such as the password modification, and the password improperly

    keyed in.

    2. The passwd.log file does not record any information for the password itself. It

    will not contain the password text, or encrypted password text.

    3. The passwd.log file is not a secure hole of the system.

    4. The passwd.log file could be removed safely from the system.

    Based on my research, the Passwd.log seems only include the password change event.

    No security impact.

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact

    Monday, July 31, 2017 6:21 AM

All replies