Active Directory Password Reset Guide

Author: Austin Nass

This guide provides the necessary information on how to reset a user’s password in Active Directory.

Resetting a User Password

  1. If in the office and connected via Ethernet, open Remote Desktop Connection from the Windows Search bar. If working remotely, connect to the Azure VPN first.

  2. Connect to blkly-file3.bleakley.local using your administrator credentials.

  3. Once logged in, open Server Manager.

  4. Select Tools in the upper-right corner and choose Active Directory Users and Computers from the drop-down menu.

  5. Locate the user account that requires a password reset.

  6. Right-click the user’s account and select Reset Password.

  7. Enter the new password that the user has requested. The password must meet the following requirements:

    • Minimum 14 characters
    • At least one capital letter
    • At least one special character
    • At least one number

  8. Check the box labeled Unlock Account if the user is locked out.

  9. Select OK to apply the password reset.

  10. Inform the user of their temporary password.

Password Requirements

All passwords in Active Directory must meet these minimum security standards:

  • Length: 14 characters minimum
  • Complexity: Include at least one capital letter, one special character, and one number
  • Uniqueness: Cannot be the same as any of the user’s previous 12 passwords

Troubleshooting

Password reset fails with error. Verify your administrative credentials have sufficient permissions. Confirm you are connected to the correct domain controller (blkly-file3.bleakley.local).

User cannot sign in after password reset. Confirm the new password meets all complexity requirements. Wait 1-2 minutes for Active Directory replication and then have the user attempt login again.

Unlock Account checkbox unavailable. This checkbox only appears if the user account is currently locked. If user is already unlocked, this option will be disabled.

Cannot locate user account. Verify the user’s name spelling and check if the account exists in a different organizational unit (OU). Use the search function to find accounts across the entire domain.