Where are the users/password located in Hostmonitor ?

[kongsjs]

Hi

We have set up an new user for hostmonitor and "KS Web service".
I have changed the name/password on the Log On tab on both services.
In "Options/Startup/Service" window I have changed the name.
I have changed the Login/Password in "Connection Manager".
I have gone thru all Action Profiles, and it's not there.
I have exported all tests and searched thru that file, and its not there.
The user "jot_bts" is removed from the computer. I have searched inside all files and registry, and it's not anywhere.
The old user is disabled in AD.
Some tests have a possibility for "Connect as" on the tests, none of this is "Ticked". But the old user name is showing there "common\jot_bts"

The problem is that as long as hostmonitor run our DCS server gets "Security Alerts" in Event view. Then is of course rejected, but is making a lot of noise in the Eventfile.

Is there more places I need to change the name/password of this user ?

Here is the event entries that appear on the DCS server.

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 680
Date: 24.09.2009
Time: 07:55:17
User: NT AUTHORITY\SYSTEM
Computer: XXXXXDCS02
Description:
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: jot_bts
Source Workstation: XXXXXMGM06
Error Code: 0xC0000072

And this:

Event Type: Failure Audit
Event Source: Security
Event Category: Account Logon
Event ID: 672
Date: 24.09.2009
Time: 07:55:17
User: NT AUTHORITY\SYSTEM
Computer: XXXXXDCS02
Description:
Authentication Ticket Request:
User Name: jot_bts
Supplied Realm Name: common
User ID: -
Service Name: krbtgt/common
Service ID: -
Ticket Options: 0x40810010
Result Code: 0x12
Ticket Encryption Type: -
Pre-Authentication Type: -
Client Address: XXX.XXX.XXX.15
Certificate Issuer Name:
Certificate Serial Number:
Certificate Thumbprint:

[kongsjs]

The "jot_bts" user is the user I'm trying to get rid of

[KS-Soft]

There are several levels where user account can be specified, as I see you have checked all of them
- Windows Services applet (normally you should use "local system" account there)
- HostMonitor Options dialog (Service page)
- Connection Manager and Password Generator (the same dialog)
- "Connect as" test property
- "Connect as" action property
That's it

May be you are using some script that contains login procedure?
May be there is some other application, not HostMonitor?

Regards
Alex