active-directorywindows
I'm in an AD domain and I want to change someone's password (which is expired but I think it is irrelevant).
I'm not a AD admin so net user <username> * /domain does not work.
I can change it pressing CTRL+ALT+DELETE->Change Password typing the old password which I have; is there a command line equivalent of this process?
The binary 'dsmod' (comes with Win7 and Vista, and somewhere along the way XP got them too) should do what you want.
dsmod user UserDN -pwd $Password -mustchpwd yes
It can do a lot more as well! Very useful tool.
There are a couple of other tools along side that one that are quite useful as well. dsquery searches AD from command-line. dsget pulls attributes from objects. dsadd allows creating objects (and users!). Definitely worth a look for any scripter.
Best Answer
Actually, if you're not a domain admin (or account admin), it's relevant: for an account with expired password, you must do an interactive logon to change the password.
Otherwise, if you know the other user's password, you may launch a Powershell session with those credentials and use the code that @Ryan Bolger just posted. Or even easier:
**** EDIT ****
Forget everything above: you can do it with that command, as that command it actually does an interactive logon. So just do:
and you'll be prompted for old password, then new password, then retype new password. I just tested it! :)