On 07/27/2010 10:21 AM, --[ UxBoD ]-- wrote: The password changes are not kept in secmod.db. They changes are kept in the passhook.dat file in the system32 directory. This file is encrypted, so there's not an easy way to remove the one problematic change from that file. I believe that you could stop the Password Sync Service and remove passhook.dat to clear things out, but you will lose whatever password changes are queued up. New changes should be sync'd fine at that point though.