Changing passwords for user accounts on Windows Server is a critical step for both security policies and administrative convenience. Ensuring that accounts accessing the server have strong and regularly updated passwords is the most basic defense against potential attacks.
In this article, we will explain how to change Windows Server passwords in three different ways:
User changing their own password
Administrator changing another user’s password via Control Panel / Computer Management
Changing passwords using PowerShell
The simplest method is when users change their own passwords.
Press CTRL + ALT + DEL at the same time.
Click Change a Password on the screen that appears.
Enter your current password first, then enter your new password twice.
Click OK to confirm, and your password will be updated.
This method is commonly used, especially for domain users who periodically change their own passwords.
If an administrator wants to change another user’s password, this method is ideal.
Open Control Panel → User Accounts from the Start menu.
Click Manage another account.
Select the user whose password you want to change.
Click Change the password.
Enter the new password and complete the process.
Open Computer Management by typing compmgmt.msc in the Start menu.
In the left panel, go to Local Users and Groups → Users.
Find the user account whose password will be changed.
Right-click the user and select Set Password.
Enter the new password and confirm.
Using this method, both Administrator and other user accounts can have their passwords changed easily.
For advanced administration, PowerShell can be used. This method saves time, especially for administrators managing multiple user accounts.
For example, to change the password for Username:
Set-LocalUser -Name Username -Password (ConvertTo-SecureString "NewPassword123!" -AsPlainText -Force)
This command will assign a new password to the specified user account. It is particularly useful for automation scenarios.
Use complex and hard-to-guess combinations when setting passwords.
Change passwords regularly.
Apply password policies using Group Policy in domain environments.
After changing passwords, make sure old passwords are not being used in RDP sessions, service accounts, or shared resources.