NET USER /DOMAIN - access denied

Question

_{Wednesday, June 14, 2017 9:10 PM}

What are the security restrictions to use this command and are there ways to give a non-admin account the ability to change it's own password?

Larry Williams City of Calgary

All replies (6)

_{Thursday, June 15, 2017 6:02 AM}

Hi,

>>What are the security restrictions to use this command and are there ways to give a non-admin account the ability to change it's own password?

It works well. You need to change it via DC.

PS C:\Users\Administrator> net user

User accounts for \\WIN-SVH7O179LB1


Administrator            Guest                    krbtgt
test1
The command completed successfully.

PS C:\Users\Administrator> net user test1 /?
The syntax of this command is:

NET USER
[username [password | *] [options]] [/DOMAIN]
         username {password | *} /ADD [options] [/DOMAIN]
         username [/DELETE] [/DOMAIN]
         username [/TIMES:{times | ALL}]
         username [/ACTIVE: {YES | NO}]

PS C:\Users\Administrator> net user test1 12345.com /domain
The command completed successfully.

PS C:\Users\Administrator>

What is userID? not user name?

run the cmd console with admin privilege.

Giving non-admin user change there PWD you could use: net user "user"  "pwd" leaving /domain.

or ctrl+alt+del/end to change.

Best regards,

Andy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Thursday, June 15, 2017 1:01 PM}

I want to find a way to change the password programmatically.  Therefore ctrl/alt/delete isn't an option.

I'm writing a python or cmd script to maintain the passwords of a couple of batch id and want to have a scheduled task to swap the current batch id with a new batch id.

NET USER <user name> <password> without /DOMAIN will only work on accounts local to the PC/SERVER.  Our batch id must access network resources and therefore the /DOMAIN is necessary.

If I use /DOMAIN I get the following

The request will be processed at a domain controller for domain coc.ca.

System error 5 has occurred.

Access is denied.

You mention I can change it on the domain controller.  What exactly am I changing on the DC to get the access I need to use this command?

Larry Williams City of Calgary

_{Friday, June 16, 2017 8:00 AM}

hi,

could you please share the solution?

i suppose it will help others to get the answer more quickly.

Best regards,

Andy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, June 19, 2017 2:20 AM}

Hi,

>>You mention I can change it on the domain controller.  What exactly am I changing on the DC to get the access I need to use this command?

I suppose so. And tried it ,worked.

Besides, please run the cmd console or powershell console with admin privilege, by right-click the icon select runas...

Best regards,

Andy

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Monday, June 19, 2017 2:43 PM}

When I get an answer to my question, I will mark it as answered.

Larry Williams City of Calgary

_{Tuesday, June 20, 2017 2:24 AM}

When I get an answer to my question, I will mark it as answered.

Larry Williams City of Calgary

Thank you sir!

Hope we can provide more for this.

Best regards,

Andy