Change a domain user password using the command line
Change a domain user password using the command line
Would you like to learn how to change a domain user password using the command line? In this tutorial, we will show you how to use the command line to set the password of a domain user account on a computer running Windows.
• Windows 2012 R2
• Windows 2016
• Windows 2019
• Windows 2022
• Windows 10
• Windows 11
Equipment list
Here you can find the list of equipment used to create this tutorial.
This link will also show the software list used to create this tutorial.
Windows Related Tutorial:
On this page, we offer quick access to a list of tutorials related to Windows.
Tutorial Windows – Changing a domain user password
As an Administrator, start an elevated command line.
List the domain user accounts.
Here is the command output:
Change the password of a domain user.
Optionally, use this command.
Enter the requested information.
In our example, we configured the password of a domain account named GOHAN.
Congratulations! You are able to change a domain user password using the command-line.
VirtualCoin CISSP, PMP, CCNP, MCSE, LPIC22022-07-27T23:05:23-03:00
Related Posts
Page load link
Ok
Protecting users’ privacy has always been the aim of every Information Technology company around the globe. Microsoft Windows has done well by allowing users to add security to their Windows servers using a domain admin profile.
With a secured domain admin, intruders or third parties cannot access your Windows server unless they have the login details. In addition to that, you have full control of all admin accounts on your Windows server.
Secured domain admin profiles are highly beneficial. However, there is a dark side attached as users often complain of lost or forgotten passwords. Change/Reset domain admin password following the guide in this article.
Part 1. Who Can Change Domain Admin Passwords?
Before sharing with you the effective ways to reset/change your domain admin password here is a fact you need to know about changing your domain admin password:
- The domain admin password to a Windows server can only be changed or reset by individuals with admin rights to the server.
If you do not meet the condition above, it means you cannot change the password to the domain admin profile on a Windows server. However, there is a way around it. We will discuss that here in this guide.
Part 2. How to Change Domain Admin Password?
Changing the password to a domain admin profile is easy. However, you must have admin rights to the profile to do so. Here we will share with you 6 techniques to change domain admin passwords.
- 1. Change Domain Admin Password without Admin Rights
- 2. Change Domain Admin Password Command Line
- 3. Change Domain Admin Password Powershell
- 4. Change Domain Admin Password from DSRM
- 5. Change Domain Admin Password in Active Directory Users and Computers Console
- 6. Change Domain Admin Password Ctrl+Alt+Del Shortcut
Way 1. Change Domain Admin Password without Admin Rights
Changing domain admin passwords without admin rights is easy when you have top-quality software like the UnlockGo – Windows Password Recovery. The software program lets you reset/change your domain admin password on your Windows computer server easily and quickly without hassles.
UnlockGo – Windows Password Recovery is well designed with several functionalities. This multipurpose software program is designed to cater to several Windows password recovery issues such as domain admin password resets/removal, Windows guest account creation, or deletion, and many others. It works with all Windows operating systems such as Windows 11/10/8/7/XP/Vista.
UnlockGo – Windows Password Recovery software is easy to use as the web interface is made simple. Change the domain admin password on your Windows computer with UnlockGo for windows by following the instructions below:
Step 1 Download and install UnlockGo for windows on another accessible Windows computer. Wait for the installation to complete, launch the software, and then click on Start.
Next, insert either a CD/USB Drive into the computer, select the appropriate media type, and then click on Next. UnlockGo for Windows will automatically burn into the CD/USB Drive to create a bootable disk.
Step 2 Next, insert the newly created bootable disk into the Windows computer you want to change its domain password, and then follow the on-screen prompts that pop up to enter the boot menu. After entering it, using arrow key to choose boot tab and then boot device priority and then press F10 to save and exit.
Step 3 Once your computer boots, it will pop up on your screen to ask for windows system of your windows, then you can select the target account to reset password.
On the next screen, select the target account you want to change/reset the domain password, click on Reset Account Password, and then tap on Next.
When get the new domain admin password, changing or reseting it can be easy using another ways whenever you want to change it with admin right for different reasons.
Way 2. Change Domain Admin Password Command Line
Running command line is another effective technique you can apply to change the domain admin password on your Windows server. The technique is easy to employ. However, you must have access to the domain admin profile to use the technique.
Should you meet the criteria above, here is a stepwise guide you can follow to change your domain admin password using the command line technique:
-
- Hold down the Windows button and X button and you will be directed to the Power User menu. Select Command Prompt (Admin) from the list of options that pops up underneath the menu.
- Enter the following command line: net user Administrator P@ssword123 /domain.
- Now replace P@ssword123 with your a password that you can easily recollect.
Way 3. Change Domain Admin Password Powershell
The use of Powershell is another amazing technique to change your domain admin password on a Windows server. It’s very similar to the command line technique but advanced. Like the command line technique, you need to have admin rights to change the domain password.
If you’ve got admin right, kindly follow the instructions below to change/reset your domain admin password using Powershell:
- Navigate your cursor to the Windows Start Menu icon and then right-click on it.
- Select Windows Powershell (Admin) from the list of options that pops up.
- Next, you will be directed to the Powershell command line panel.
- Enter the command line below:
$NewPassword = ConvertTo-SecureString “******” –AsPlainText –Force
Set-ADAccountPassword Bob –NewPassword $NewPassword -Reset
Here is an image for a better understanding of the instruction:
Way 4. Change Domain Admin Password from DSRM
With DSRM, you can also change your domain admin password on Windows. DSRM, also known as Directory Services Restore Mode.
-
- Turn on your computer and then tap on the F8 key. A couple of options should pop up on doing that, kindly select Directory Services Restore Mode from the list.
- Next, you will be directed to the login screen. Log in as an administrator to proceed.
-
- On the next screen, copy cmd.exe, Srvany.exe, and Instsrv.exe to a temporary folder and then name it.
-
- Now double-click the newly named folder to open a command prompt. Once the command prompt opens, type: instsrv PWRESET “C:\temp\servant.exe”.
- Next, launch the Registry Editor, and then scroll to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\P.
- Establish a new subkey and name it Parameters and then include the values below:
name: Application
type: REG_SZ (string)
value: c:\temp\cmd.exe
name: AppParameters
type: REG_SZ (string)
value: /k net user administrator P@ssword/domain
-
- Now, click on Control Panel > Administrative Tools > Services > PWRESET Services. Ensure the following are properly set:
- General >Startup Type: Automatic.
- Log On >Allow Service to Interact with Desktop: Checked.
-
- Now click on OK and then reboot your computer. Once the log-in screen pops up, type Administrator in the user field and then enter P@ssword in the password field to gain access into the server.
- Next, launch the command prompt to delete the PWRESET services by entering the following command:
net stop PWRESET
sc delete PWRESET
Way 5. Change Domain Admin Password in Active Directory Users and Computers Console
To change your domain admin password on Windows using Active Directory Users and Computers Console, follow the instructions below:
-
- Simultaneously hold the Windows button and R key to launch the Run box.
- Enter dsa.msc in the Open field and then click on OK to open the Active Directory Users and Computers (AUDC) console.
-
- On the left-hand panel of the AUDC page, scroll down and click on Users.
- On the right-hand panel, right-click on the domain admin account you want to reset, and then select Reset.
- Enter a strong password that you can easily remember in the fields provided, uncheck the User must change password at next logon tab, and then click on OK.
Way 6. Change Domain Admin Password Ctrl+Alt+Del Shortcut
Lastly, we have the use of the hotkeys, Ctrl+Alt+Del to change domain admin passwords on Windows. This technique works perfectly only on Windows 2012 servers. Also, you must be logged on to the server to use the technique.
Change domain admin password using the hotkeys, Ctrl+Alt+Del by following the guide below:
-
- On your Windows Server domain controller page, press the keys Ctrl+Alt+Del, and the page below will pop up.
- Select Change a password.
- Enter your previous password and then type your new password in the appropriate field. Confirm your new password in the field given and then click on the Arrow key to validate the process.
People Also Asked: Domain Admins vs Administrators in Windows
Domain Admin is an account created on a Windows server. This account has the administrative rights to control all other domain admin accounts created subsequently.
Administrator on the other hand is the default account you find on your computer when you launch your Windows operating system. This account has admin access to the domain accounts you created, however, there is no administrative access to control the accounts.
Conclusion
With the tutorial guide given above, resetting or changing your domain admin password on Windows is easier than ever before. Employ any of the techniques given and see the magic.
Mind you, asides from the use of UnlockGo for Windows, the other techniques require you to have admin rights to the domain account before you can reset/change the passwords.
UnlockGo (Windows)
Change/Reset Domain Admin Password in Easy Steps
- Change Domain Admin Password in Easy 3 Steps.
- Reset Domain Admin Password with 100% Working Success Rate, 0% Data Loss.
- Support All Windows OS and Windows Server versions.
- Remove Domain Admin Password, Delete/Remove Domain Admin Account with Ease.
Changing the domain administrator password on a Windows Server 2016 is a crucial task for maintaining security and access control. The domain administrator password is the key to the kingdom, providing admins with full access and control over the server environment. Regularly updating the domain administrator password helps to prevent unauthorized access and protect sensitive information. In this blog post, we will explore the importance of changing the domain administrator password and provide detailed instructions on how to do it effectively.
Video Tutorial:
Why You Need to Change the Domain Administrator Password
There are several important reasons why you should change the domain administrator password on your Windows Server 2016:
1. Security: The domain administrator account has the highest level of privileges on the server. Regularly changing the password ensures that unauthorized individuals or malicious actors do not gain access to critical systems and data.
2. Compliance: Many industry regulations require organizations to implement strong security practices, including regular password changes. Changing the domain administrator password helps maintain compliance with these regulations.
3. Employee Turnover: When an employee with domain administrator access leaves the organization, changing the password ensures that they no longer have access to the server environment.
4. Best Practice: Changing the domain administrator password regularly is considered a best practice in IT security. It adds an additional layer of protection against unauthorized access and potential security breaches.
Method 1: Using Active Directory Users and Computers
This method involves using the Active Directory Users and Computers MMC (Microsoft Management Console) snap-in to change the domain administrator password. Follow the steps below:
1. Open the Active Directory Users and Computers MMC snap-in. You can do this by clicking on the Start button, selecting «Administrative Tools,» and then choosing «Active Directory Users and Computers.«
2. In the console tree, expand the «Domain» container and navigate to the «Users» container.
3. Locate the domain administrator account in the user list and right-click on it. Select «Reset Password» from the context menu.
4. In the «Reset Password» dialog box, enter the new password for the domain administrator account. Make sure to choose a strong and complex password.
5. Confirm the new password by re-entering it in the «Confirm password» field.
6. Click «OK» to save the changes and apply the new password to the domain administrator account.
Pros:
– Easy and familiar interface for administrators who are already familiar with Active Directory Users and Computers.
– Can be accessed and performed on any computer with the Active Directory Users and Computers MMC snap-in installed.
Cons:
– Requires administrative access to the Active Directory Users and Computers snap-in.
– May not be suitable for administrators who are not familiar with Active Directory management.
Method 2: Using PowerShell
PowerShell provides a powerful command-line interface for managing Windows Server environments. Changing the domain administrator password using PowerShell is a quick and efficient method. Follow the steps below:
1. Open PowerShell with administrative privileges. You can do this by right-clicking on the Start button and selecting «Windows PowerShell (Admin).«
2. Run the following command to change the domain administrator password:
«`
Set-ADAccountPassword -Identity «Administrator» -NewPassword (ConvertTo-SecureString -AsPlainText «NewPassword123!» -Force) -Reset
«`
Replace «NewPassword123!» with your desired new password. Make sure to choose a strong and complex password.
3. Press Enter to execute the command and change the domain administrator password.
Pros:
– Quick and efficient method for changing the domain administrator password.
– Can be easily scripted and automated for larger server environments.
Cons:
– Requires administrative access to PowerShell.
– May not be suitable for administrators who are not familiar with PowerShell scripting.
Method 3: Using Group Policy
Using Group Policy to change the domain administrator password applies the new password to multiple servers within the domain simultaneously. Follow the steps below:
1. On a domain controller, open the Group Policy Management console. You can do this by clicking on the Start button, selecting «Administrative Tools,» and then choosing «Group Policy Management.«
2. In the console tree, expand «Forest,» expand the domain, and then select the «Group Policy Objects» container.
3. Right-click on the desired Group Policy Object (GPO) and select «Edit.«
4. In the Group Policy Management Editor, navigate to «Computer Configuration,» «Preferences,» «Control Panel Settings,» and then choose «Local Users and Groups.«
5. Right-click on «Administrator» in the right-hand pane and select «Set Password.«
6. Enter the new password for the domain administrator account. Make sure to choose a strong and complex password.
7. Click «OK» to save the changes.
Pros:
– Allows for centralized password management across multiple servers within the domain.
– Changes can be easily applied to all servers within the domain simultaneously.
Cons:
– Requires administrative access to the Group Policy Management console.
– May not be suitable for administrators who are not familiar with Group Policy management.
Method 4: Via Command Prompt
Using the Command Prompt is another method for changing the domain administrator password. Follow the steps below:
1. Open Command Prompt with administrative privileges. You can do this by right-clicking on the Start button and selecting «Command Prompt (Admin).«
2. Run the following command to change the domain administrator password:
«`
net user administrator NewPassword123!
«`
Replace «NewPassword123!» with your desired new password. Make sure to choose a strong and complex password.
3. Press Enter to execute the command and change the domain administrator password.
Pros:
– Easy and efficient method using the built-in Command Prompt.
– Can be executed quickly without the need for additional tools or interfaces.
Cons:
– Requires administrative access to the Command Prompt.
– May not be suitable for administrators who are not familiar with Command Prompt commands.
What to Do If You Can’t Change the Domain Administrator Password
If you are unable to change the domain administrator password using the methods mentioned above, here are some fixes you can try:
1. Verify Administrator Privileges: Make sure you have administrative privileges on the server and the appropriate user rights to change passwords.
2. Check for Account Lockouts: If the domain administrator account is locked out due to multiple unsuccessful login attempts, unlock the account first before attempting to change the password.
3. Resetting the Password Using a Boot Disk: If all else fails, you can use a boot disk or third-party tool to reset the domain administrator password. This method should only be used as a last resort and with caution.
Bonus Tips
Here are three bonus tips to further enhance the security of your domain administrator password:
1. Enable Two-Factor Authentication: Implementing two-factor authentication adds an extra layer of security by requiring a second form of verification, such as a mobile app or token, in addition to the password.
2. Implement a Password Management Policy: Establish a password management policy that includes strong password requirements, regular password changes, and password complexity rules.
3. Use a Password Manager: Consider utilizing a password manager to securely store and manage passwords. Password managers generate and store complex passwords, reducing the risk of using weak or easily guessable passwords.
5 FAQs
Q1: Can I change the domain administrator password remotely?
A1: Yes, you can change the domain administrator password remotely using PowerShell or other remote management tools.
Q2: Can I use the same password for the domain administrator account across multiple servers?
A2: While using the same password for multiple servers may seem convenient, it is not recommended from a security perspective. It is advisable to use unique passwords for each server.
Q3: Will changing the domain administrator password affect other user accounts?
A3: Changing the domain administrator password does not affect other user accounts unless they have explicitly used the same password.
Q4: How often should I change the domain administrator password?
A4: It is generally recommended to change the domain administrator password at least every 90 days or based on the security policy of your organization.
Q5: Can I recover the domain administrator password if I forget it?
A5: It is not possible to recover the domain administrator password if you forget it. However, you can reset the password using the steps mentioned in the «What to Do If You Can’t Change the Domain Administrator Password» section.
Final Thoughts
Changing the domain administrator password on a Windows Server 2016 is an essential security practice that helps protect sensitive systems and data. By regularly changing the password and implementing strong password policies, you can significantly enhance the security of your server environment. Utilize the methods described in this blog post and follow the steps carefully to ensure a smooth and secure password change process. Remember to also implement the bonus tips and address any issues that may arise during the password change process.
В этой статье мы рассмотрим, как изменить (сбросить) пароль одного или нескольких пользователей Active Directory с помощью графической оснастки Active Directory Users and Computers, из командной строки, а также с помощью PowerShell командлета Set-ADAccountPassword.
Содержание:
- Изменить пароль пользователя домена из графической консоли Active Directory
- Как сбросить пароль пользователю Active Directory с помощью PowerShell?
- PowerShell скрипт для сброса пароля нескольких пользователей AD
- Изменить пароль пользователя в домене из командной строки
Изменить пароль пользователя домена из графической консоли Active Directory
Для сброса пароля пользователя Active Directory можно использовать графическую оснастку
dsa.msc
(Active Directory Users & Computers — ADUC). Воспользуйтесь поиском в консоли ADUC и найдите учетную запись пользователя, которому нужно изменить пароль. Щелкните по нему правой кнопкой и выберите пункт “Смена пароля” (Reset password).
Укажите новый пароль (дважды). Здесь можно включить две опции:
- User must change password at next logon – если вы хотите, чтобы пользователь сам задал себе новый пароль при следующем входе;
- Unlock user’s account – включите эту опцию, если вы хотите разблокировать пользователя (если учетная запись заблокирована политикой безопасности AD из-за многократных попыток входа с неверным паролем).
Это самый просто и интуитивно понятный способ сброса пароля пользователя домена.
Также в свойствах пользователя на вкладке редактора атрибутов AD вы можете найти информацию о дате последней смены пароля. Это значение хранится в атрибуте пользователя pwdLastSet.
Для сброса пароля ваша учетной запись должна обладать соответствующими правами. По-умолчанию обычные пользователи AD не могут сбросить пароль других аккаунтов. Такие права есть только у учетных записей с правами администратора домена (Domain Admins), или Account Operators. Вы можете предоставить другим группам пользователям право на сброс паролей в определенных OU с помощью делегирования. По ссылке доступен пример делегирования прав на сброс паролей и разблокировку пользователей группе HelpDesk.
Чтобы проверить, что у вашей учетной записи есть право на сброс пароля определенного пользователя, откройте его свойства, перейдите на вкладку Security -> Advanced -> Effective Access -> укажите имя своей учетной записи -> убедитесь, что у вас есть разрешение Reset Password.
Как сбросить пароль пользователю Active Directory с помощью PowerShell?
Вы можете использовать команды PowerShell для сброса пароля пользователя в AD. Для этого можно использовать используется командлет Set-ADAccountPassword, входящий в модуль Active Directory для Windows PowerShell (в десктопых версиях Windows он входит в состав RSAT, а в серверных редакциях устанавливается в виде отдельного компонента AD DS Snap-Ins and Command-Line Tools). Перед использованием модуля его необходимо импортировать в сессию PowerShell:
Import-module ActiveDirectory
Чтобы сбросить пароль для пользователя dakimov и установить новый пароль SuperStr0n@p1, выполните команду:
Set-ADAccountPassword dakimov -Reset -NewPassword (ConvertTo-SecureString -AsPlainText “SuperStr0n@p1” -Force -Verbose) –PassThru
alert]Для автоматической генерации сложный паролей пользователям вы можете использовать метод GeneratePassword, описанный в статье Генерация случайных паролей с помощью PowerShell. [/alert]
По умолчанию командлет возвращает объект и ничего не отображает в консоли. Чтобы вывести информацию об объекте пользователя в AD мы используем параметр –PassThru.
В качестве имени пользователя можно указать sAMAccountName (как в нашем случае), objectGUID, SID пользователя, или его DN (Distinguished Name, например CN=Akimov,OU=Users,DC=winitpro,DC=ru).
Если при смене пароля пользователя не указывать параметр –Reset, необходимо указать старый и новый пароль учетной записи.
Примечание. Если при сбросе пароля с помощью командлета Set-ADAccountPassword появляется ошибка:
Set-ADAccountPassword : The password does not meet the length, complexity, or history requirement of the domain.
Это означает что, новый пароль не соответствует требования сложности, длины и т.д., заданным в доменной политике паролей или гранулированной политике паролей, действующей на учетную запись пользователя.
Результирующие настройки парольной политики пользователя в домене можно вывести так:
Get-ADUserResultantPasswordPolicy -Identity a.novak
Если у вас включено ведение истории PowerShell команд, и вы не хотите, чтобы пароли в открытом виде сохранялись в сессии PoSh, пароль как и при создании пользователя нужно преобразовать в безопасную строку (подробнее о защите паролей в скриптах PowerShell здесь):
$NewPasswd=Read-Host "Введите новый пароль пользователя" –AsSecureString
Теперь можно задать новый пароль пользователю:
Set-ADAccountPassword dakimov -Reset –NewPassword $NewPasswd –PassThru
При сбросе пароля можно принудительно снять блокировку ученой записи, если она была заблокирована ранее (как найти с какого компьютера блокируется учетная запись, смотрите в статье Поиск источника блокировки пользователя в Active Directory):
Unlock-ADAccount –Identity dakimov
Чтобы пользователь при следующем входе в домен самостоятельно сменил данный пароль на новый, нужно изменить его свойства в AD, выполнив команду:
Set-ADUser -Identity dakimov -ChangePasswordAtLogon $true
Вы можете совместить в одной строке команду смены пароля и включение требования сменить пароль (атрибут userAccountControl):
Set-ADAccountPassword dakimov -NewPassword $NewPasswd -Reset -PassThru | Set-ADuser -ChangePasswordAtLogon $True
С помощью командлета Get-ADUser вы можете убедиться, что пароль сброшен успешно. Выведите время последней смены пароля аккаунта:
Get-ADUser dakimov -Properties * | select name, pass*
При сбросе пароля на контроллере домена (DC) регистрируется событие EventID 4724. Это событие помогает определить учетную запись, которая выполнила сброс пароля пользователя.
Вы можете узнать, когда истекает срок действия пароля пользователя согласно текущим настройкам политики паролей с помощью PowerShell команды:
Get-ADUser -Identity avivanov -Properties msDS-UserPasswordExpiryTimeComputed | select-object @{Name="ExpirationDate";Expression= {[datetime]::FromFileTime($_."msDS-UserPasswordExpiryTimeComputed") }}
PowerShell скрипт для сброса пароля нескольких пользователей AD
Выше мы показали, как из PowerShell сбросить пароль одного пользователя в AD. Рассмотрим теперь другой сценарий – когда вам нужно сменить пароли сразу нескольких пользователей.
Например, вы хотите сбросить пароль всем сотрудникам департамента Sales на одинаковый и заставить сменить его при следующем входе. Вы можете использовать параметр –Filter для выбора пользователей с определенным значением в одном из атрибутов:
get-aduser -filter "department -eq 'Sales Dept' -AND enabled -eq 'True'" | Set-ADAccountPassword -NewPassword $NewPasswd -Reset -PassThru | Set-ADuser -ChangePasswordAtLogon $True
Рассмотрим еще один пример. Допустим, у вас есть CSV/Excel файл, в котором содержится список пользователей, которым нужно сбросить пароли и уникальный пароль для каждого пользователя. Формат файла users.csv:
sAMAccountName;NewPassword aivanov;PaSSde0r1 bpetrov;New$isde01 ssidorov;k@nndj!223
С помощью следующего скрипта PowerShell можно сбросить пароль для каждой учетной записи пользователя из CSV файла:
Import-Csv users.csv -Delimiter ";" | Foreach {
$NewPass = ConvertTo-SecureString -AsPlainText $_.NewPassword -Force
Set-ADAccountPassword -Identity $_.sAMAccountName -NewPassword $NewPass -Reset -PassThru | Set-ADUser -ChangePasswordAtLogon $false
}
После выполнения данного кода всем пользователям в файле будет установлен новый уникальный пароль.
Изменить пароль пользователя в домене из командной строки
Если на компьютере не установлена консоль ADUC, или модуль RSAT-AD-PowerShell, вы можете использовать консольную команду net use для сброса пароля. Чтобы получить информацию о пользователе в домене, выполните команду:
net user a.novak /domain
В командной строке показана базовая информацию о пароле пользователя в домене:
Password last set 4/20/2022 2:10:05 AM Password expires Never Password changeable 4/21/2022 2:10:05 AM Password required Yes User may change password Yes Last logon 4/20/2022 2:58:47 AM Logon hours allowed All
Из значения Last Logon можно узнать, когда пользователь входит в домен последний раз. Чтобы получить более подробную информацию об истории входа пользователя в домен, смотри статью.
Чтобы сбросит пароль этого пользователя, выполните команду:
net user a.novak /domain *
Укажите новый пароль и подтвердите его:
Type a password for the user: xx Retype the password to confirm: xx The command completed successfully.
August 20, 2012 updated by
Leave a reply »
I just lost my domain administrator password so can anyone please do tell me how to change it so that I can log onto domain controller or add any further machines into domain via that account. I would be waiting anxiously for all your suggestions.
In Windows 2008/2003/2000, if the server is a domain controller, you must set a strong password to meet the password policy requirements when you create a new account. By default, domain password requires at least 7 characters and at least 1 numeric character or at least 1 special character (*&^%$#@, etc.). You may also be forced to change the password on a regular basis. So there is a big chance that you would forgot the password. What to do if you forgot Windows domain password and can’t log in with any other account?
In this tutorial we’ll show you how to change Windows domain password if you forgot it. Follow the steps below you can change your forgotten domain password on Windows Server 2008/2003/2000 in minutes.
How to Change Windows Domain Password:
- Download Password Recovery Bundle and save it on any accessible computer. Install and launch Password Recovery Bundle, then click Windows Password button, the pop-up dialog enables you to create a password reset CD.
- To make your locked computer boot off the password reset disk, head over to the computer’s BIOS and make some changes: Set CD-ROM as the 1st boot device.
- Insert the password reset disk you’ve created into your locked computer. Restart the computer. You’ll notice the boot screen is not the same as usual because it is loading from the password reset disk now.
- It takes a while to load some necessary files and launch the Reset Windows Password utility. Here we’re going to change Windows Domain password, so we choose the Reset Active Directory Password option. It will display a list of domain user accounts on your domain controller.
- Choose a domain account whose password you forgot, then click Reset Password button. The program will change its password to Password123 by default.
- Remove the password reset disk and restart the computer.
Now you’ve successfully changed Windows domain password on your domain controller. You can then log on the computer with your new password.
- Previous Post: How to Show Computer Icon on Windows 8 Desktop
- Next Post: How to Change Windows 7 Logon Screen