In a domain environment you have to use the domain tools to change domain accounts: https://serverfault.com/a/642180/76309
Because domain accounts are all "local" ONLY on the Domain Controller (DC), you'd have to be on the DC in order to use NET USER
.
As you're not on the DC, you'll have to use something else, but you'll probably have problems:
dsquery user -samid *username* | dsmod user -pwd *new_password*
-OR-
net user *username* *new_password* /domain
The problem you'll have is that both of these commands require the console be run as Administrator, likely Domain Administrator, and it's unlikely your account has these permissions.
The other method would be to ask one of the techs to allow you to open your KeePass database on their computer and use the AD Users and Computers console on their computer to paste your password in. Personally, I'm not sure I'd do that for one of my users because, frankly, there are better, easier, ways to get a secure password.
The better way: Use a passphrase.
Unless your enterprise has some weird settings, your password has been able to have spaces for a long time. This means that sentences are a viable password option. Sentences are both easy to recall and can be very, VERY secure quite easily. Just a few words together with proper capitalization and punctuation will meet the requirements of all but the oddest security setup while still being easy to recall and enter.
How are you going to log in to the computer? Will you be referencing KeePass on a different computer or mobile device to retrieve the password? Also, you should research WHY your username does not show up using the NET USER command. – music2myear – 2017-06-19T15:42:55.407
There are several applications on my enterprise network that require the windows login information. To log in to the computer I use a smart card. – Devin Trowbridge – 2017-06-19T16:57:50.403
Am I correct to assume this computer is on a domain and your account is a domain account? Have you checked with your IT staff for their recommendations? – music2myear – 2017-06-19T17:03:51.677
That's correct. From what I understand
net
only pulls up accounts on the local machine, which is why I'm not seeing my domain account. I have checked with them, but unfortunately they didn't have any solutions for me. – Devin Trowbridge – 2017-06-19T17:09:18.630I figured out that
net user MyUserName * /domain
will find my domain username and prompt me to change my password. However, due to the privileges on my network, I don't have access to change my password this way, i.e. I getSystem error 5 has occurred. Access is denied.
. Unless there is some other way besidesctrl+alt+delete
, control panel, and the cmd line. I don't think this is possible, at least not without administrative privileges. – Devin Trowbridge – 2017-06-19T17:28:32.880Yes, in testing my answer below I had the same error, and googling it indicated that CMD must be run as Admin (as you're running a command against the domain you'll need domain admin) for it to work. – music2myear – 2017-06-19T17:30:21.430