Change Your Password in Windows Server 2022

Why it matters

A server holds important data and services. A weak or old password is an easy way in for attackers. Change passwords on a regular schedule, and at once if you think someone else knows them.

Method 1: With the screen (GUI)

1. Log in to the server with your current password.

   

2. Press Ctrl + Alt + Delete. If you use Remote Desktop, press Ctrl + Alt + End instead.
3. Click Change a password.
4. Type your current password in Old password.
5. Type the new password in New password and again to confirm it.
6. Click OK (or press Enter).

Method 2: With the command line

1. Open Command Prompt. To change the password of another user you must run it as administrator (right-click it and choose Run as administrator).

   

2. Type this command, with the user name and the new password:

net user username NewPassword123!

To be asked for the password and keep it off the screen, use an asterisk:

net user username *

1. Press Enter. A message says "The command completed successfully."

If you see "Access is denied", run Command Prompt as administrator.

For a domain account, add /domain:

net user username * /domain

Make a strong password

1. Use upper and lower case letters, numbers and symbols.
2. Use at least 12 characters. Longer is better.
3. Do not use birthdays, pet names or common words.
4. Use a different password for every account.
5. Use a password manager to create and store them.

Keep passwords private

• Never share a password in an email or a chat.
• Do not write passwords on paper or in a text file on the server.
• Turn on two-factor authentication where you can.
• Change the passwords of shared accounts when a person leaves.

Quick recap

• GUI: Ctrl + Alt + Delete, then Change a password.
• CLI: net user username * as administrator.
• Use a long, unique password.