Reset AD Password from Machine not on Domain?

[jmair]

Is there a way to run domain CMD lines from a machine that is not on the domain? I need to reset student passwords from a machine that is not on the domain and I'm at a loss for getting an authentication promp to add the domain admin creds.

[vimagoes]

Remote connection to a domain controller? Unless your DC is configured to only accept domain accounts.

I think you can use Invoke command from powershell to connect to your DC using domain credentials, not sure.

Edited September 20, 2018 by vimagoes

[HPlum78]

$rmtsession = New-PSSession -ComputerName  -credential (Get-Credential)
Invoke-Command $rmtsession -Scriptblock { Import-Module ActiveDirectory }Import-PSSession -Session $rmtsession
Get-ADUser -Identity  | 'The password cmdlet that i can never remember!'

Edited September 20, 2018 by HPlum78

[HPlum78]

[h=1]Set-ADAccountPassword[/h]

That one

[jmair]

I'll give that a shot, thanks HPlum78

[Davit2005]

Make sure that the credentials file is encrypted and you are not using the administrator account, this should go the same for any domain joined machine as well whilst running any powershell scripts that need such access to the domain.

 

I'd also consider making a special account with delegated permissions for changing passwords only on a specific student OUs and avoid using a Domain Admin accounts at all costs.