Community
cancel
Showing results for 
Search instead for 
Did you mean: 
david921
Beginner
75 Views

Anyway to check whether the user has changed the password?

Jump to solution
Is there any way for me to check whether the user have change the password but not the configure?
i try usingiamt_scan_v0.3.1.1 but there arent any status stating that...
0 Kudos
1 Solution
Lance_A_Intel
Employee
75 Views

There are a couple of different passwords that I can think of that you may be interested in. There is the MEBx password (initially the same as the admin password) and there are Access Control List (ACL)users/passwords. The admin account is part of the ACL.

You can determine when an ACL entry has been added, removed, or modified using the Access Monitor feature. Please refer to the SDK documentation section: Intel AMT Features > Access Monitor > Detailed Description > Event Groups and Event IDs > Security Admin Events

You can also use the Access Monitor to see when attempts were made to access AMT using an ACL account or access MEBx with invalid passwords.

View solution in original post

2 Replies
Lance_A_Intel
Employee
76 Views

There are a couple of different passwords that I can think of that you may be interested in. There is the MEBx password (initially the same as the admin password) and there are Access Control List (ACL)users/passwords. The admin account is part of the ACL.

You can determine when an ACL entry has been added, removed, or modified using the Access Monitor feature. Please refer to the SDK documentation section: Intel AMT Features > Access Monitor > Detailed Description > Event Groups and Event IDs > Security Admin Events

You can also use the Access Monitor to see when attempts were made to access AMT using an ACL account or access MEBx with invalid passwords.

View solution in original post

david921
Beginner
75 Views
hi,
what about in case where the machine is notprovision but the user go into MEBx to change the password? can we still use access monitor to see that?
Thanks
Reply