Process using logon credentials

By brian24 ·
I recently took over as the IT Manager and the old Manager's account password has been changed, but I am still seeing logon attempts, successes and then an immediate logoff. The process using the user credentials is one of the svchost.exe processes. Does anyone have any idea why this is occurring? Is it safe to disable that account? Is there a way to find out why that process is using that user's credentials.

Thanks in advance

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Do you know which of the svchost

by Dumphrey In reply to Process using logon crede ...

processes it is? Chances are its a service utility he installed under his account (backup, AV, defrag script). If you disable his account it will prevent this service from working, which would log an error in event viewer, but if it is a service, you can manually change its log on credentials in process manager.

Related Discussions

Related Forums