Windows EventInformation
Windows Event ID 4747 – Security: Computer Account Password Changed
Event ID 4747 indicates a computer account password has been changed in Active Directory. This security audit event fires when domain controllers update machine account passwords during normal operations or administrative actions.