Hi all, I need to make a script that send an email when a user member of the domain change the password from Windows xp. I thought to set syslog = 5 and with swatch analyze /var/log/syslog, but I can't find the right line. Any ideas?