Change user password in Windows command line

We can change a user password from Windows command line using net user command. The command is explained below with examples.

How to change local user password

For example, if you want to reset the password for the user John on the local computer, you can run the below command. Let’s say the new password is pq12d*[email protected]

You may not want to provide the new password in the command prompt for obvious security reasons. Net use command allows to reset the password so that none around your desk can see it. You need to provide * in the place of password while executing net use command. You will be prompted to type the password and the password you enter won’t be printed on the screen. But you need to feed the password twice to make sure that you have entered the password you intended to.

How to change domain user account password

If you want to change password for a domain account, you can do it by running the below command.

Next, you will be prompted twice to enter the password and on successful completion your domain account password will be reset. You can also provide the password in the command itself as explained above.

In case the domain is not reachable then you will get the below error when you try to run the above command.

hi on my VISTA computer i get this
“System error 1355 has occurred.
The specified domain either does not exist or could not be contacted.”

Make sure that your system can contact the domain controller(DC) machine. see if ‘ping ip-of-DC’ works..
ex: ping 10.20.30.40

Any command to show the password of a user?

Nope. Only reset or add password is available via command prompt on windows. Another trick is to reset the password in seconds (such as PassMoz LabWin) and add a new password to the computer so you can know what is the password is.

when i enter in my case:
net user Stingray*; to make sure my password isn’t printed on the screen it says “The syntax of the command is: and then it gives me a whole bunch of different options. it doesn’t let me put in a password

you should have whitespace between user name and *. The command should be
net user stingray *

“The user name could not be found.
More help is available by typing NET HELPMSG 2221.”
Is this happened because my username contains spaces (example : John’s Family) ?
What to do ?
Thanks

i have a problem after retyping the new password. It says

System error 5 has occurred.
Access is denied.

Looks like you don’t have admin privileges on the system to change password of another user.

right click command prompt and run as administrator.
or
select command prompt Ctl+Shift+Enter
the execute the command.

In this case you have to open the cmd as run administrator and try it again it will happen,

C:\>net user Peter Norton Jr *
The syntax of this command is:

NET USER
[username [password | *] [options]] [/DOMAIN]
username /ADD [options] [/DOMAIN]
username [/DELETE] [/DOMAIN]
C:\>NET USER ASPNET newpassword:*
System error 5 has occurred.

Access is denied.

C:\>NET USER ASPNET newpassword *
The syntax of this command is:

NET USER
[username [password | *] [options]] [/DOMAIN]
username /ADD [options] [/DOMAIN]
username [/DELETE] [/DOMAIN]
this is what i m getting when trying to change password ?
help please

please run cmd as administrator.
And you can reset password.
Thanks

How can you change the password in command line and also prompt the user to change it at his next login?
I know for sure this option exists in GUI mode “User must change password at next logon”.

Following;
Any updates on this query im curious as well tia!

This cmd command worked like a charm!
Thanks

I’ve tried many times but never get changed successfully comment.

Net user TST Main VLRIPCITY

This comment goes to those who are having issues with changing passwords for user accounts that have spaces in between (James Clark, for example). The white space in between breaks down the user name into two and affects the syntax structure i.e. net user username password.therefore the line: net user James Clark 12234, is the same as: user James, password: Clark 12234. in which the user James does not exist on the computer. try an underscore between the usernames e.g. net user James_Clark 12234.

i want to know how to login using cmd with password(i have password) without changing it.

I receive an error that says the system is not authoritative for the specified account and therefore cannot complete the operation please retry the operation using the provider associated with this account. if this is an online provider please use their providers online site. This is a local account on a Windows 10 computer so I’m a bit confused.

the command net user user_name* need to verify for password complexity and this wont work if use script such as php as we need to reenter the password ,instead using net user user_name new_password will change the password without prompt

I am not a Domain Admin.
How can i change my domain user password.

Hi ALL
I have a PC on the domain…but off the network…user cannot login and i recive password reset cause cant login into VPN
Is it possible to reset domain password via cmd
or even reset the local password via cmd.
referring to cmd on automatic repair / advanced troubleshooting screen

I really need to know how to do that when running INVOKE command, error 5 previleges still.

NET USER
[username [password | *] [options]] [/DOMAIN]
username /ADD [options] [/DOMAIN]
username [/DELETE] [/DOMAIN]
username [/TIMES:]

next what i want to do dns server not authoritative for zone please guide me what i can do for the password reset.

NET USER
[username [password | *] [options]] [/DOMAIN]
username /ADD [options] [/DOMAIN]
username [/DELETE] [/DOMAIN]
username [/TIMES:]

I keep getting this message I’m trying to change my password

NET USER
[username [password | *] [options]] [/DOMAIN]
username /ADD [options] [/DOMAIN]
username [/DELETE] [/DOMAIN]
username [/TIMES:]

I keep getting this message I’m trying to change my password

i have a problem please help me .
when i want to change my password my keyboard does’n work

NET USER
[username [password | *] [options]] [/DOMAIN]
username /ADD [options] [/DOMAIN]
username [/DELETE] [/DOMAIN]
username [/TIMES:]
I’m getting the same thing. You haven’t replied to these answers, do you not know?

I am able to change password/unlock using Active Directory utility but not able change password from command line

Have you tried with /domain, since this seems to be for a active directory account and not local one.

How can i do if my username include a point : for example Q.S ?

Net user command : Manage user accounts from command line

Using Net user command, administrators can manage user accounts from windows command prompt. Below are some examples on how to use this command.

Add a domain user account:

Add new user on local computer:

Advanced options to add new user account can be read in the below article.
Add new user from windows command line.

Disable/Lock a domain user account:

To enable/unlock a domain user account:

Prevent users from changing their account password:

To allow users to change their password:

To retrieve the settings of a user:

thaaaaaaaaanx man for the precious information

One Extra Feature that might be very useful.. is to set the Password to Never Expires:

I am using the /EXPIRES:NEVER switch on the end of the command, however the Never Expires checkbow is not ticked when i check the properties

Please notice that the /expires – switch prevents the the account from expiring, but not to the password.

That’s correct. Thanks Ray for clarifying it here for the benefit of others.

Use This Command To Set “Password Never Expire”

WMIC USERACCOUNT WHERE “Name=’username_here’” SET PasswordExpires=FALSE

Is there a way to change the net user username?

My question is how to create multiple users on a network through a command in command prompt using only single command line.

with a loop for.
FOR/L %variable IN (start, step, end) DO command [Settings]

for /L %U in (10,1,20) do net user user-%U Password /add /dom
(to create 10 users named user-10, user-11 to user-20)

check FOR /F [“options”] %%parameter IN (“Text string to process”) DO command
it’s works but not secure

Very good post on windows command line. Thanks for sharing.

Your command for “Add a domain user account” is incorrect, the proper one is:
Net user domainuser domainpassword /add /domain

Gives result:
“The request will be processed at a domain controller for domain softros.local.
The command completed successfully.”

hi how can i create multiple users from cmd
but just with one command??

i know for creating a new user i can use this:
net user username password /add
and to make him an administrator i can use this:
net user username password administrator /add

correct me if i’m wrong and help me please.

Your query, [hi how can i create multiple users from cmd
but just with one command??] – did you ever get an answer to that question ?
Please let me know.

i am currently locked out of my local administrator account on my windows server 2008 r2

i am able to change user accounts and passwords how ever it still telling me that my username or password is incorrect.

i have created a new user account and password but even the new user account and password doesnt work.

Is there a way to put a number of hours logon to the guest account?

interesting stuff here .. Thanks …

hi every body…
please help me how to add users with environment variable(starting program)?

How can I know who changed password for a user on windows server 2008 R2 from CMD and OS?

How can I check from our Internal domain and not our normal /domain?

Thanks so much! However is there a line to reset a password?

Hi I have forgotten my password to get onto the two accounts set up. When I go into net user neither accounts are showing. I get a message saying
The command completed with one or more errors
Can anyone help

hello guys in my college when i type the command “net users” it shows two accounts one is “guest” and another is “administrator” but in the login screen there are two accounts one is “guest” and another is “ADMIN” .why this ‘ADMIN’ account is not showing in the cmd.

Is there a command line command to add a group or user name under the security tab option Group or user names: for a domain user?

How to check a user which was created in a different trusted domain. Not to the machine joined.

How can we check for an account creation or disablement date in cmd

How can we run a command to replace the email address in AD from powershell

I need your assistance with batch command tomake this change in my secpol.msc!

i need to set the “password policy” > Password must meet complexity….. to be DISABLED or ENABLED

Just be aware that unlocking/enabling a user account also sets it so that the password must be changed on next logon.

I limit login time with “net user time” command of our son account on W10, but when time expire … he is logout from his User account and login under Admin account WITHOUT been asked for Admin´s password!

Any idea why? Thank you.

Please help me can you find the password for profile, when you are on it.

The article seems to think these are the same things.
They are NOT:

Enabled/disable an account.
Lock/unlock an account.

why does the last logon line read “never”? i have this with my current user which i am trying to time restrict. it wont restrict because it claims to have never logged in.

How can I pull the information of a user who is the different domain in Active Directory like IN or BR or AR?

Hello,
Great read! I am hoping u can help me. I am trying to set time limits for a user. However it completed successfully and still allows user to logon when he is not supposed too! Any advice.

what command i can use get net user status in a single query ?i looking for the format
example
account status
admin enabled

change user change user

Область применения: Windows Server (половина ежегодного канала), Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012 Applies to: Windows Server (Semi-Annual Channel), Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Изменяет режим установки для сервера узла сеансов удаленный рабочий стол. Changes the install mode for the Remote Desktop Session Host server.

Чтобы узнать о новых возможностях последней версии, см. статью новые возможности службы удаленных рабочих столов в Windows Server. To find out what’s new in the latest version, see What’s New in Remote Desktop Services in Windows Server.

Синтаксис Syntax

Параметры Parameters

Параметр Parameter	Описание Description
/EXECUTE /execute	Включает сопоставление ini-файла с домашним каталогом. Enables .ini file mapping to the home directory. Это параметр по умолчанию. This is the default setting.
/install /install	Отключает сопоставление ini-файлов с домашним каталогом. Disables .ini file mapping to the home directory. Все ini-файлы считываются и записываются в системный каталог. All .ini files are read and written to the system directory. Необходимо отключить сопоставление ini-файлов при установке приложений на удаленный рабочий стол сервере узла сеансов. You must disable .ini file mapping when installing applications on a Remote Desktop Session Host server.
/Query /query	Отображает текущее значение для сопоставления ini-файла. Displays the current setting for .ini file mapping.
/? /?	Отображение справки в командной строке. Displays help at the command prompt.

Комментарии Remarks

Прежде чем устанавливать приложение для создания ini-файлов для приложения в системном каталоге, используйте параметр » Сменить пользователя/install «. Use change user /install before installing an application to create .ini files for the application in the system directory. Эти файлы используются в качестве источника при создании INI-файлов конкретного пользователя. These files are used as the source when user-specific .ini files are created. После установки приложения используйте параметр изменить пользователя/Execute , чтобы вернуться к стандартному сопоставлению ini-файлов. After installing the application, use change user /execute to revert to standard .ini file mapping.

При первом запуске приложения он выполняет поиск своих ini-файлов в домашнем каталоге. The first time you run the app, it searches the home directory for its .ini files. Если ini-файлы не найдены в домашнем каталоге, но находятся в системном каталоге, службы удаленных рабочих столов копирует ini-файлы в корневой каталог, гарантируя, что каждый пользователь имеет уникальную копию INI-файлов приложения. If the .ini files aren’t found in the home directory, but are found in the system directory, Remote Desktop Services copies the .ini files to the home directory, ensuring that each user has a unique copy of the application .ini files. Все новые ini-файлы создаются в домашнем каталоге. Any new .ini files are created in the home directory.

Каждый пользователь должен иметь уникальную копию INI-файлов для приложения. Each user should have a unique copy of the .ini files for an application. Это не позволяет экземплярам, в которых разные пользователи могут иметь несовместимые конфигурации приложений (например, другие каталоги по умолчанию или разрешения экрана). This prevents instances where different users might have incompatible application configurations (for example, different default directories or screen resolutions).

Когда система выполняет изменение пользователя/install, происходит несколько действий. When the system is running change user /install, several things occur. Все созданные записи реестра скрыты в разделе HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion\Terminal Server\Install, в подразделе \софтваре или подразделе \мачине . All registry entries that are created are shadowed under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\Currentversion\Terminal Server\Install, in either the \SOFTWARE subkey or the \MACHINE subkey. Подразделы, добавленные в HKEY_CURRENT_USER , копируются в подразделе \софтваре , а подразделы, добавленные в HKEY_LOCAL_MACHINE , копируются в подраздел \мачине . Subkeys added to HKEY_CURRENT_USER are copied under the \SOFTWARE subkey, and subkeys added to HKEY_LOCAL_MACHINE are copied under the \MACHINE subkey. Если приложение запрашивает каталог Windows с помощью системных вызовов, таких как Жетвиндовсдиректори, сервер узла сеансов удаленных рабочих столов возвращает каталог systemroot. If the application queries the Windows directory by using system calls, such as GetWindowsdirectory, the rd Session Host server returns the systemroot directory. Если какие-либо записи ini-файла добавляются с помощью системных вызовов, таких как Вритеприватепрофилестринг, они добавляются в ini-файлы в каталоге systemroot. If any .ini file entries are added by using system calls, such as WritePrivateProfileString, they are added to the .ini files under the systemroot directory.

Когда система возвращается к изменению user/execute и приложение пытается прочитать запись реестра в разделе HKEY_CURRENT_USER , которая не существует, службы удаленных рабочих столов проверяет, существует ли копия ключа в подразделе \терминал сервер\инсталл . When the system returns to change user /execute, and the application tries to read a registry entry under HKEY_CURRENT_USER that does not exist, Remote Desktop Services checks to see whether a copy of the key exists under the \Terminal Server\Install subkey. Если это так, подразделы копируются в соответствующее расположение в разделе HKEY_CURRENT_USER. If it does, the subkeys are copied to the appropriate location under HKEY_CURRENT_USER. Если приложение пытается выполнить чтение из ini-файла, который не существует, службы удаленных рабочих столов ищет этот ini-файл в корневом каталоге системы. If the application tries to read from an .ini file that does not exist, Remote Desktop Services searches for that .ini file under the system root. Если ini-файл находится в корневом каталоге системы, он копируется в подкаталог \Windows домашнего каталога пользователя. If the .ini file is in the system root, it is copied to the \Windows subdirectory of the user’s home directory. Если приложение запрашивает каталог Windows, сервер узла сеансов удаленных рабочих столов возвращает подкаталог \Windows домашнего каталога пользователя. If the application queries the Windows directory, the rd Session Host server returns the \Windows subdirectory of the user’s home directory.

При входе в систему службы удаленных рабочих столов проверяет, являются ли файлы System. ini более новыми, чем ini-файлы на компьютере. When you log on, Remote Desktop Services checks whether its system .ini files are newer than the .ini files on your computer. Если версия системы более новая, ini-файл будет заменен или объединен с более новой версией. If the system version is newer, your .ini file is either replaced or merged with the newer version. Это зависит от того, установлен ли для этого ini-файла бит ИНИСИНК, 0x40. This depends on whether or not the INISYNC bit, 0x40, is set for this .ini file. Предыдущая версия ini-файла переименовывается в Инифиле. CTX. Your previous version of the .ini file is renamed as Inifile.ctx. Если значения системного реестра в подразделе \Терминал сервер\инсталл новее версии HKEY_CURRENT_USER, ваша версия подразделов будет удалена и заменена новыми подразделами из \терминал сервер\инсталл. If the system registry values under the \Terminal Server\Install subkey are newer than your version under HKEY_CURRENT_USER, your version of the subkeys is deleted and replaced with the new subkeys from \Terminal Server\Install.

Примеры Examples

Чтобы отключить сопоставление ini-файлов в домашнем каталоге, введите: To disable .ini file mapping in the home directory, type:

Чтобы включить сопоставление ini-файлов в домашнем каталоге, введите: To enable .ini file mapping in the home directory, type:

Чтобы отобразить текущую настройку для сопоставления ini-файлов, введите: To display the current setting for .ini file mapping, type: