Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Suppose that users in a domain aunthenticate using windows domain controller.

How can the administrator of the windows domain controller change the passwords of users?

Does this require user's consents? (I do not think so, but just to make sure..)

I want to know in Windows 2000, 2003 and 2008.

share|improve this question

closed as off topic by larsks, Chris S Aug 16 '12 at 2:41

Questions on Server Fault are expected to relate to server, networking, or related infrastructure administration within the scope defined by the community. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about reopening questions here.If this question can be reworded to fit the rules in the help center, please edit the question.

Microsoft does a pretty good job of providing online documentation for Windows administration. Have you looked to see what documentation is available? Was something unclear, or did you try something and receive an error message? Show us that you've tried to find the answer. – larsks Aug 16 '12 at 0:28
Given that you're asking for three versions of Windows server, and it sounds like you've not checked documentation before this some kind of homework question, honestly? – Bart Silverstrim Aug 16 '12 at 0:33

To change someone's password, an admin's user account needs to be a member of the Domain Administrators or Account Operators groups. Alternatively, permission to reset passwords can be delegated to a specific user or groups.

You use the Users and Computers MMC snap-in which is available on the domain controller, or can be run from an Administrator's desktop using the adminpak.msi or by the remote server administration toolset.

Most of what you will need to know to perform basic administration of an AD infrastructure can be found at I suggest you start there.

share|improve this answer
Is something incorrect or not helpful here? – SpacemanSpiff Aug 16 '12 at 0:29
No, seems like a stupid downboat to me. +1 from this guy. – EEAA Aug 16 '12 at 0:30

Not the answer you're looking for? Browse other questions tagged or ask your own question.