Learn the different ways to reset Active Directory (AD) user passwords using the Microsoft Management Console, Command Line, and PowerShell.
By velanitsupport / Oct 9, 2026

Network administrators manage user accounts as well as resources using a centralized domain called Active Directory, developed by Microsoft. It enables users to log in to any computer using a single username and password.

The IT help desk crews frequently receive requests for resetting forgotten or expired passwords from users. In such instances, with the required permissions, administrators reset passwords through the Active Directory Users and Computers console. 

This guide provides easy instructions for resetting an AD user password using PowerShell.

  • Step: 1

    Log in to the AD server using the admin account.

  • Step 2:

    Open the Active Directory Users and Computers window.

  • Step 3:

    Select users and find the account whose password is to be changed. 

  • Step 4:

    Right-click to select the “Reset Password” option.

  • Step 5:

    Enter the new password in the respective fields and confirm.

  • Step 6:

    Select “User must change password at next logon”. It allows the user to create a new password when they sign in next time.

When you have a core server that does not have a GUI, you can change the AD password using the following in the command line.

DSMOD User Test1 – PWD Password – MustChPWD Yes/No – canchpwd yes/no – pwd never expires yes/no

For this, you need to execute the following PowerShell commands in an administrator account.

Set-ADAccountPassword –Identity User –Reset

Now, you can enter the new password, followed by a confirmation.

How does Velan help with password reset requests?

Businesses can outsource basic IT support services to Velan Remote IT Support. Hiring our team on a flexible model allows businesses to access professional support from skilled engineers. We also offer after-hours IT support as well as holiday coverage services for businesses across industries.

How to Check the Active Directory Password Policy?

The AD default password policy can be viewed in two ways. 
Use the Get-ADDefaultDomainPasswordPolicy cmdlet in PowerShell.
Check the settings through the Group Policy Management Console (GPMC).

Why does my new password get rejected in AD?

Check whether the “minimum password age” policy has been set to ‘1 day’. If yes, you cannot change the password again on the same day. This option prevents users from quickly changing passwords to reuse an old password from the password history.

Categories

Contact for a Free Consultation