Distinguishing Between Reset Password and Change Password

What's the difference between the Reset password and Change password permissions on user objects in Active Directory (AD)?

The Change password permission requires that the person who changes the password know the account's current password. When an administrator or support person handles a user's forgotten password, the administrator or support person uses the Reset password permission, which doesn't require knowledge of the account's current password. With AD's default permissions, you can change your own password, but only Administrators and Account Operators can reset passwords.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.