I am new to PS so today I opened a new session with my DC and tried to change a password for one of the users. I made sure Execution policy was set to unrestricted and that I ran PS with Domain Admin credentials.
[win2k8]: PS C:\Users\hardware\Documents> Set-ADAccountPassword -Identity lseetram -OldPassword(ConvertTo-SecureStri
AsPlainText “Old password”-Force) -NewPassword(ConvertTo-SecureString -AsPlainText “New password” -Force)
Set-ADAccountPassword : Access is denied
At line:1 char:1
- Set-ADAccountPassword -Identity lseetram -OldPassword(ConvertTo-SecureString -As …
+ CategoryInfo : PermissionDenied: (lseetram:ADAccount) [Set-ADAccountPassword], UnauthorizedAccessException + FullyQualifiedErrorId : Access is denied,Microsoft.ActiveDirectory.Management.Commands.SetADAccountPassword
I Googled the issue but could not find anything related to this except that one of the tips was to remove SpecOps GPUpdate, which I did and no change. I also tried to refer to the account by using CN and no change.