Updated: April 17, 2012
Applies To: Windows Server 2008 R2, Windows Server 2012, Windows 8
Uses the Key Distribution Center (KDC) password (kpasswd) value to change the password of the logged-on user. For examples of how this command can be used, see Examples.
This command uses the KDC password (kpasswd) value to change the password of the logged-on user. The kpasswd, if set, is displayed in the output by running the ksetup /dumpstate command.
The user's new password must meet all the password requirements that are set on this computer.
If the user account is not found in the current domain, the system will ask you to supply the domain name where the user account resides.
If you want to force a password change at next logon, this command allows the use of the asterisk (*) so the user will be prompted for a new password.
The output of the command informs you of the success or failure status.
Change the password of a user who is currently logged on to this computer in this domain:
ksetup /changepassword Pas$w0rd Pa$$w0rd
Change the password of a user who is currently logged on in the Contoso domain:
ksetup /domain CONTOSO /changepassword Pas$w0rd Pa$$w0rd
Force the currently logged on user to change the password at the next logon:
ksetup /changepassword Pas$w0rd *