15 - Windows Server 2012 Allow Users to Reset Password (Video in Khmer)

Hello my friend! Today I show you step-by-step how to Allow Users to Reset Password on Client Computer using GPO on Windows Server 2012 R2 inside VMware! Enabling user password reset options allows domain users to change their expired or forgotten password easily directly from client PC without contacting IT helpdesk every time! Very easy to follow with video tutorial in Khmer! Let's get started!

💡 Tip: Always set proper Password Complexity and Minimum Password Age policy in GPO so users create strong passwords and cannot change back to old passwords right away!

Watch Video Tutorial (Khmer)

Watch full step-by-step video tutorial below to see complete process in Khmer:

Step 1: Open Active Directory Users and Computers (ADUC)

1. Open Server Manager > click Tools menu at top right > select Active Directory Users and Computers (dsa.msc).
2. Right-click your domain name (example: mydomain.local) or specific Organizational Unit (OU) > select Delegate Control....
3. On Delegation of Control Wizard welcome screen > click Next.

Step 2: Select User or Group to Delegate Password Reset Rights

1. Click Add... button > type target group or user name (example: IT_Helpdesk or user account) > click Check Names > click OK.
2. Click Next.
3. Under Tasks to Delegate list, check box Reset user passwords and force password change at next logon.
4. Click Next > click Finish.

💡 Tip: Delegating password reset permission to IT Helpdesk group is much safer than giving full Domain Admin rights to junior staff!

Step 3: Change Password Directly on Client Computer (Ctrl + Alt + Del)

Domain users can also change their own password directly from Windows client computer:

1. On client computer (Windows 7/8/10 domain joined), press key combination Ctrl + Alt + Delete.
2. Click option Change a password....
3. Type Old password, then enter New password and Confirm password > press Enter.
4. System displays message "Your password has been changed".

💡 Tip: If administrator checks box User must change password at next logon inside Active Directory on server, client PC automatically forces user to set new password right after typing old password at login screen!

Step 4: Force Update Group Policy (gpupdate /force)

To make sure updated policy applies immediately on domain client computer:

1. Open Command Prompt (cmd) on client computer.
2. Type command gpupdate /force and press Enter.
3. Wait until message shows "Computer Policy update has completed successfully". Now password change policy works on client PC!

💡 Tip: If user forgets password completely and account gets locked out, administrator can uncheck Account is locked out box inside Active Directory user properties to unlock user account instantly!

Related Tutorials

• 🎓 Windows Server 2012 Complete Tutorial Series (Video in Khmer)
• 🔓 04 - Windows Server 2012 Remove Default Strong Password (Video in Khmer)
• 👤 05 - Windows Server 2012 Create OU and User Account (Video in Khmer)
• 🚫 14 - Windows Server 2012 Disable All USB Port using GPO (Video in Khmer)
• 💽 16 - Windows Server 2012 How to Set RAID 5 (Video in Khmer)

Hope this tutorial help you allow users to reset password on Windows Server 2012 R2 easily! Practice password delegation and policy management today. Happy learning my friends! Sharing is caring!