Resetting Windows Passwords

There's a manual method for resetting a Windows Password and bypassing the password history requirement:

Log on to a computer using a domain user account who is a member of the Accounts Operators security group.
Open Active Directory Users and Computers.
Find the Administrator account.
In the right pane, right click on the user account and then click on the “Reset Password” action.
Type in the documented password.
Untick "User Must Change Password at Next Logon".
Click OK.
Test the password by logging in as domain administrator in another VM. Important: do this before rebooting to ensure you don't lock yourself out!

BUT this means that the old passwords are still remembered in the history. To get around this, try the following PowerShell Script (obviously it can be made a lot lot shorter using a loop!).

# This script resets the administrator password and clears all the password history

# by cycling through 50 passwords (assuming that the defaults of 24 passwords).

# It needs to be run on the DC as a PowerShell Administrator.

$Identity = Get-ADDefaultDomainPasswordPolicy -Current LoggedOnUser

Set-ADDefaultDomainPasswordPolicy -Identity $Identity -MinPasswordAge 0

$OldPassword = (Read-Host -Prompt "Enter Current Administrator Password" -AsSecureString)

Set-ADAccountPassword -Identity Administrator -OldPassword $OldPassword -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!01" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!01" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!02" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!02" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!03" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!03" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!04" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!04" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!05" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!05" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!06" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!06" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!07" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!07" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!08" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!08" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!09" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!09" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!10" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!10" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!11" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!11" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!12" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!12" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!13" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!13" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!14" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!14" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!15" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!15" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!16" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!16" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!17" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!17" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!18" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!18" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!19" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!19" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!20" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!20" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!21" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!21" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!22" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!22" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!23" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!23" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!24" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!24" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!25" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!25" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!26" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!26" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!27" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!27" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!28" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!28" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!29" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!29" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!30" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!30" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!31" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!31" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!32" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!32" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!33" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!33" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!34" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!34" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!35" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!35" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!36" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!36" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!37" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!37" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!38" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!38" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!39" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!39" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!40" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!40" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!41" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!41" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!42" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!42" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!43" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!43" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!44" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!44" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!45" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!45" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!46" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!46" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!47" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!47" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!48" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!48" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!49" -Force)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!49" -Force) -NewPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!50" -Force)

$NewPassword = (Read-Host -Prompt "Enter New Administrator Password" -AsSecureString)

Set-ADAccountPassword -Identity Administrator -OldPassword (ConvertTo-SecureString -AsPlainText "qwert@12345!50" -Force) -NewPassword $NewPassword

Set-ADDefaultDomainPasswordPolicy -Identity $Identity -MinPasswordAge 1

Page updated

Google Sites

Report abuse