Changing passwords from the command line

8 Jul 2009 9:37 PM

VGE

I have tried changing user passwords on a domain using both net user
[username] [password] and dsmod [userdn] [password] and both times I get
access is denied. The account that I am logged into is a copy of the
Administrator account. If I log in using the Administrator account the
commands work perfectly but any other account regardless of permissions
seem to get the access is denied message. Have I missed some privilege
or permission that is not copied when using the copy function in the ADS
mmc panel? Any help would be appreciated.

9 Jul 2009 6:55 AM

Syed Khairuddin

Hello,

Are you trying this on the DC or from the client ?? Did u tried
the same thing with Active Directory Users and Computers ??

9 Jul 2009 1:43 PM

VGE

Syed Khairuddin wrote:

> Hello,
>
> Are you trying this on the DC or from the client ?? Did u tried
> the same thing with Active Directory Users and Computers ??
>

Yes on the DC and as long as I am signed in as administrator I can do
all the changes even from Active Directory Users and Computers. The
problem is doing it from a copied administrator account.

9 Jul 2009 5:00 PM

kj [SBS MVP]

VGE wrote:

> Syed Khairuddin wrote:
>> Hello,
>>
>> Are you trying this on the DC or from the client ?? Did u
>> tried the same thing with Active Directory Users and Computers ??
>>
> Yes on the DC and as long as I am signed in as administrator I can do
> all the changes even from Active Directory Users and Computers. The
> problem is doing it from a copied administrator account.

Start the command prompt with a runas administrator.

--
/kj

9 Jul 2009 7:59 PM

VGE

That would be fine if I was not incorporating it into a .NET App that
executes the commands through an SSH shell.

kj [SBS MVP] wrote:
Show quoteHide quote

> VGE wrote:
>> Syed Khairuddin wrote:
>>> Hello,
>>>
>>> Are you trying this on the DC or from the client ?? Did u
>>> tried the same thing with Active Directory Users and Computers ??
>>>
>> Yes on the DC and as long as I am signed in as administrator I can do
>> all the changes even from Active Directory Users and Computers. The
>> problem is doing it from a copied administrator account.
>
> Start the command prompt with a runas administrator.
>

9 Jul 2009 12:25 PM

Paul Bergson [MVP-DS]

Please include the command you are attempting to use. Just change the name
and password so as not to expose and internal information.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

Show quoteHide quote

"VGE" <msvge@community.nospam> wrote in message
news:%23bDTmRBAKHA.4432@TK2MSFTNGP02.phx.gbl...
>I have tried changing user passwords on a domain using both net user
>[username] [password] and dsmod [userdn] [password] and both times I get
>access is denied. The account that I am logged into is a copy of the
>Administrator account. If I log in using the Administrator account the
>commands work perfectly but any other account regardless of permissions
>seem to get the access is denied message. Have I missed some privilege or
>permission that is not copied when using the copy function in the ADS mmc
>panel? Any help would be appreciated.

9 Jul 2009 1:42 PM

VGE

Paul Bergson [MVP-DS] wrote:

> Please include the command you are attempting to use. Just change the name
> and password so as not to expose and internal information.
>

I've tried:

net user TestU ResetPass123! /domain

And:

dsmod "CN=Test User,OU=Users,DC=Domain,DC=com" -pwd ResetPass123!