PowerShell Script to Reset Password Easily

Use the PowerShell command Set-LocalUser -Name 'username' -Password (ConvertTo-SecureString 'NewPassword123!' -AsPlainText -Force) to reset a local user's password.

Examples

InputReset password for user 'John' to 'NewPass123!'

OutputPassword for user 'John' has been reset successfully.

InputReset password for user 'Admin' to 'Secure!2024'

OutputPassword for user 'Admin' has been reset successfully.

InputReset password for non-existing user 'Ghost' to 'Test123!'

OutputError: User 'Ghost' not found or another error occurred.

How to Think About It

To reset a password in PowerShell, identify the user account, convert the new password into a secure string, and then apply it using the appropriate cmdlet like Set-LocalUser for local accounts. This approach ensures the password is handled securely and updated correctly.

Algorithm

1

Get the username whose password needs resetting.

2

Convert the new password string into a secure string.

3

Use the PowerShell cmdlet to set the new password for the user.

4

Confirm the password reset succeeded or handle errors.

Code

powershell

try {
  $username = 'John'
  $newPassword = 'NewPass123!'
  $securePassword = ConvertTo-SecureString $newPassword -AsPlainText -Force
  Set-LocalUser -Name $username -Password $securePassword
  Write-Output "Password for user '$username' has been reset successfully."
} catch {
  Write-Output "Error: User '$username' not found or another error occurred."
}

Output

Password for user 'John' has been reset successfully.

Dry Run

Let's trace resetting password for user 'John' to 'NewPass123!' through the code

1

Set username and new password

$username = 'John', $newPassword = 'NewPass123!'

2

Convert password to secure string

$securePassword = ConvertTo-SecureString 'NewPass123!' -AsPlainText -Force

3

Reset password using Set-LocalUser

Set-LocalUser -Name 'John' -Password $securePassword

Step	Action	Value
1	Username	John
2	New Password (secure)	SecureString object
3	Password Reset	Success

Why This Works

Step 1: Convert password securely

The password string is converted to a secure string using ConvertTo-SecureString to protect it in memory.

Step 2: Use Set-LocalUser cmdlet

Set-LocalUser updates the local user's password with the secure string, ensuring the account is updated.

Step 3: Error handling

The try-catch block catches errors like missing users and outputs a friendly message.

Alternative Approaches

Using Active Directory module for domain users

powershell

Import-Module ActiveDirectory
Set-ADAccountPassword -Identity 'John' -NewPassword (ConvertTo-SecureString 'NewPass123!' -AsPlainText -Force) -Reset
Write-Output "Password for domain user 'John' has been reset."

Use this if resetting passwords for domain accounts; requires Active Directory module and permissions.

Using net user command

powershell

net user John NewPass123!
Write-Output "Password for user 'John' has been reset using net user command."

Simpler but less secure; password is visible in plain text and no error handling.

Complexity: O(1) time, O(1) space

Time Complexity

The password reset is a single operation with no loops, so it runs in constant time.

Space Complexity

Only a few variables are used, so space usage is constant.

Which Approach is Fastest?

Using Set-LocalUser or Set-ADAccountPassword is efficient and secure; the net user command is simpler but less secure.

Approach	Time	Space	Best For
Set-LocalUser	O(1)	O(1)	Local user password reset with security
Set-ADAccountPassword	O(1)	O(1)	Domain user password reset with AD module
net user command	O(1)	O(1)	Quick local reset, less secure