Passord Changes question



Does anyone know why "NT Authority/Anonymous LOGON" would change a users
password.

It always occurs on a DC, and is not always successful. Is this a private
password like <computername>$
that Windows maintains ?


Security Event Ids : 627, 628


.