Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.

ChangePW was a small, late-1990s-era Windows command-line utility documented by Jerold Schulman in JSI Tip 9267 on April 17, 2005. Its published help screen listed options to set a user password, select a domain or server, display userAccountControl flags, and enable or disable an account. That documentation is historical: there is no verified current download, support statement, integrity information, or evidence that the program works on modern Windows or Active Directory.

What JSI Tip 9267 documented

JSI Tips were Jerold Schulman’s short Windows-administration reference notes. Tip 9267 described a freeware program attributed to Joe Richards and identified as ChangePW V02.01.00cpp, with a help header dated November 1999. The original entry was a syntax reference, not a full installation, compatibility, or troubleshooting guide. The archived record is available from ITPro Today.

The published syntax

ChangePW V02.01.00cpp
Joe Richards ([email protected])
November 1999

Usage:
  changepw.exe [/d:domain] [/s:server] /u:userid [/p:password] [/a:(y|n)] [/f]

  /d:domain   - domain to manipulate userid on.
  /s:server   - server to manipulate userid on.
  /u:userid   - userid to manipulate.
  /p:password - password to set userid to.
  /a:y        - make account active.
  /a:n        - make account inactive.
  /f          - display current flags.

Use freely; you are responsible for all results.

The examples below are reconstructed from that help text. They are illustrative, not commands verified on Windows 10, Windows 11, Windows Server 2022, Windows Server 2025, or any current environment.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Switch Historical meaning What the article did not establish
/d:domain Select the domain containing the user. Whether every mode supported local accounts, or how domain discovery and authentication worked.
/s:server Select a server. Whether this meant a domain controller, member server, or another server role.
/u:userid Select the user ID. Accepted name formats, quoting rules, or Unicode support.
/p:password Set a password. Exit codes, password length limits, policy behavior, or whether it could be combined with other switches.
/a:y / /a:n Make the account active or inactive. Whether this changed only the enabled state or also affected lockout, expiration, or other properties.
/f Display current account flags. The exact output format and which flags were decoded.

Reconstructed examples

changepw.exe /u:jsmith /p:NewPassword
changepw.exe /d:EXAMPLE /u:jsmith /p:NewPassword
changepw.exe /d:EXAMPLE /s:DC01 /u:jsmith /a:y
changepw.exe /d:EXAMPLE /s:DC01 /u:jsmith /a:n
changepw.exe /d:EXAMPLE /s:DC01 /u:jsmith /f

Do not infer from these lines that the utility automatically enables an account after a password reset, clears a lockout, bypasses policy, or works against a current domain. None of those behaviors is documented in the source.

#1 Best Overall
Sale
Password Safe
  • Requires 3 "AAA" batteries (included)
  • Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs

What “userAccountControl flags” actually are

userAccountControl is an Active Directory bit field. Its bits describe broader account-control properties, not merely password settings. Depending on the account, they can represent state such as disabled, password-never-expires, or user-cannot-change-password, as well as authentication and legacy directory behaviors. Microsoft documents the flags and their hexadecimal values in its userAccountControl reference.

For routine administration, a dedicated property such as Enabled or a specific cmdlet is safer and clearer than manually changing a numeric bit field.

Rank #2
Atlancube PasswordPocket Offline Hardware Password Keeper with Bluetooth Auto-Fill for iPhone and Android, Stores 1,000 Logins, Military-Grade AES-256 Encryption (Black)
  • Auto-Fill Feature: Say goodbye to the hassle of manually entering passwords! PasswordPocket automatically fills in your credentials with just a single click.
  • Internet-Free Data Protection: Use Bluetooth as the communication medium with your device. Eliminating the need to access the internet and reducing the risk of unauthorized access.
  • Military-Grade Encryption: Utilizes advanced encryption techniques to safeguard your sensitive information, providing you with enhanced privacy and security.
  • Offline Account Management: Store up to 1,000 sets of account credentials in PasswordPocket.
  • Support for Multiple Platforms: PasswordPocket works seamlessly across multiple platforms, including iOS and Android mobile phones and tablets.

Why the old utility needs caution

  • Availability: the old ITPro Today URL now leads to a TechTarget migration notice; it does not provide a verified ChangePW binary, source, checksum, or maintenance status.
  • Compatibility: the program predates current Windows and Active Directory releases. Its supported operating systems, APIs, authentication behavior, and Unicode handling are unknown.
  • Provenance: do not treat an arbitrary mirror as official, and do not assume an old unsigned executable is safe or malware-free.
  • Secret exposure: /p:password places a secret in command text. Shell history, transcripts, process inspection, monitoring, batch files, repositories, or screen recordings may expose it.
  • Operational risk: a wrong account, server, or delegated credential can affect a production identity. Test only in an isolated environment with a recovery plan.

If a legacy investigation genuinely requires ChangePW, establish the binary’s provenance and checksum, test it offline or in a lab, use the least-privileged account available, and document rollback. Otherwise, use supported Windows or Microsoft Active Directory tools.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Modern replacements for local Windows accounts

For a local account, the built-in command prompts for the password rather than putting it in the command line:

Rank #3
Sale
Elegant Password Book with Alphabetical Tabs - Hardcover Password Book for Internet Website Address Login - 5.2" x 7.6" Password Keeper and Organizer w/Notes Section & Back Pocket (Turquoise)
  • NEVER FORGET A PASSWORD AGAIN: Almost every App. has a password, it is almost impossible to remember all the password log in details. This password book is specifically designed to help you create secure passwords and store all your passwords safely in one place. You will never forget your password log-in details again with this password keeper.
  • ALPHABETICAL A-Z TABS FOR QUICK ACCESS: Alphabetical tabs design allows you to store your passwords alphabetically so you can find what you want faster, no more annoying searches!
  • ANONYMOUS WITHOUT ANY TITLE: On the outside, this password notebook organizer looks just like those writing journals, there is no title listed on the cover, so no one would know it's a password book. But we still recommend keeping the internet password logbook in a safe place such as a locked drawer or a shelf full of books.
  • THICK NO-BLEED PAPER: This 5.2" x 7.6" password book contains 74 sheets of thick 120gsm paper that resists ink smearing, say goodbye to those cheap password books that bleed ink!
  • PREMIUM QUALITY & PERFECT MEDIUM SIZE: This password journal comes with a high-quality leatherette hardcover, an elastic band, pen holder, ribbon bookmarker, and inner accordion pocket. It measures 5.2 inches wide and 7.6 inches long, which is the perfect size for your needs.
net user USERNAME *

Microsoft documents net user. PowerShell can use a secure prompt:

$Password = Read-Host "New password" -AsSecureString
Set-LocalUser -Name "jsmith" -Password $Password

Check that the cmdlet exists in the current session with Get-Command Set-LocalUser. The LocalAccounts module is not available in every execution context, including some 32-bit PowerShell sessions on 64-bit Windows. See Microsoft’s Set-LocalUser reference.

Rank #4
Sale
Clever Fox Password Book with Alphabetical Tabs, 4"x5.5" Keeper Black
  • NEVER FORGET A PASSWORD AGAIN - Clever Fox password journal will help you create secure passwords and keep them safe and organized. This password book allows you to store all your passwords and other computer information in one place to find it easily.
  • ALPHABETICAL A-Z TABS - Alphabetic tab system makes it easy to find any password you need. The book also has sections for most important passwords, wireless & email settings, software license information & additional notes.
  • ELEGANT, SMART, PRACTICAL & SECURE PASSWORD ORGANIZATION - This password keeper book has been designed to be anonymous without an obvious title on the cover. For added security there is space to write hints instead of the password itself.
  • POCKET SIZE & PREMIUM QUALITY - This internet address and password logbook with tabs comes in pocket size (4.0x5.5 inches). The password notebook has an eco-leahter hardcover, elastic band, pen loop, bookmark, pocket for notes, and thick 120gsm paper.
  • 60-DAY MONEY-BACK GUARANTEE - We will exchange or refund your password organizer if you aren’t satisfied with your password organization for any reason. Reach out to us via message to refund your internet password logbook.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Modern replacements for Active Directory

For an administrator reset of a domain user’s password:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Import-Module ActiveDirectory
$Password = Read-Host "New password" -AsSecureString
Set-ADAccountPassword -Identity "jsmith" -Reset -NewPassword $Password

-Reset is an administrative reset; it is not the same as a user changing a known password. Permissions, password history, complexity, and other domain policy still apply. See the Set-ADAccountPassword documentation.

Best Value
RecZone LLC Password Safe Electronic Storage Organizer Keeper Device and Stylus Bundle
  • Securely Remember All Your Passwords, Log-in's, User Names, ATM PIN Numbers and More
  • Large Back-lit LCD Screen, QWERTY Keyboard - So Easy to Use
  • Enter one PIN number and have access to 400 accounts. Search function included.
  • Unit auto locks for 30 minutes after 5 consecutive incorrect PIN attempts
  • Includes mini stylus for easier keypad entry

Enable or disable an AD account explicitly:

Enable-ADAccount -Identity "jsmith"
Disable-ADAccount -Identity "jsmith"

References: Enable-ADAccount and Disable-ADAccount.

Inspect state without editing bit values:

Get-ADUser -Identity "jsmith" -Properties userAccountControl |
    Select-Object SamAccountName, Enabled, userAccountControl

See Microsoft’s Get-ADUser reference.

Permissions, prerequisites, and common failures

Success depends on account scope, delegated rights, password policy, DNS and network access to a domain controller, trust resolution, and the availability of the relevant PowerShell module. Typical problems include:

  • Unknown command: the executable is missing or not on PATH.
  • Wrong scope: a local account is being addressed with an AD cmdlet, or vice versa.
  • Bad target: the server is unavailable or is not an appropriate domain controller.
  • Permission denied: the caller lacks reset, enable, or disable rights.
  • Policy rejection: the password violates length, complexity, history, or reuse rules.
  • Quoting errors: special characters can be interpreted by cmd.exe; prompts or secure variables avoid putting them in command text.
  • Replication delay: a change on one domain controller may take time to appear elsewhere.
  • Incomplete recovery: resetting a password does not necessarily unlock an account or change expiration settings.

For a failed operation, confirm whether the identity is local or domain-based, verify the target, retry with supported Microsoft tooling, inspect the resulting state, and check replication before repeating attempts. Repeated retries can worsen lockout risk. If an AD account was disabled accidentally, use Enable-ADAccount -Identity "jsmith"; use a local-account command for a local user.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Should you still use ChangePW?

For new administration, generally no. Use it only for controlled legacy analysis when you can verify the exact binary’s provenance and integrity, test it safely, understand the permissions and audit implications, and maintain a recovery procedure. The 2005 tip remains useful as historical documentation of an old syntax—not as evidence of current support or a trustworthy download.

Quick Recap

SaleBestseller No. 1
Password Safe
Password Safe
Requires 3 "AAA" batteries (included); Unit auto-locks for 30 minutes after 5 consecutive incorrect PINs
$30.80
Bestseller No. 5
RecZone LLC Password Safe Electronic Storage Organizer Keeper Device and Stylus Bundle
RecZone LLC Password Safe Electronic Storage Organizer Keeper Device and Stylus Bundle
Securely Remember All Your Passwords, Log-in's, User Names, ATM PIN Numbers and More; Large Back-lit LCD Screen, QWERTY Keyboard - So Easy to Use
$37.84

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.