The Set Domain User Account Password task can be used to set a specific static password for a domain user or can be used to set a random password for a domain user.
Steps:
- First complete an Create an Active Directory Domain
- Important note: The default user credential defined in the first step must be a Domain Admin in order to set the password of a domain user.
- Then navigate to Tasks > Server Tasks and right-click on Directory Services
- Select New > Set Domain Account Password
- This policy can be configured to set a specific password for the domain account, or if the password field is left blank the task will set a random password
- Leave the Directory Id and Directory Partner Id fields empty.
- Set the password field to a specific password (or leave blank for a random password)
- Select the directory user id from the picker and click save
- After the task has been saved it can be run on a schedule or immediately by right-clicking the task and selecting Run...
- After the task has run, navigate to Resources > Security Principal > Domain User
- Right-click on the domain user the password was just set for and click Show Managed User Password
- This will disclose the currently set password of that domain user, and the disclosure will be audited in the standard disclosure reports.