Net RPC Password Change

Force password change via Net RPC

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated April 10, 2026

Tool: net
Category: Credential Attacks / Password Manipulation
Platform: linux
Requires: password
Protocols: RPC

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

net rpc password '<user>' '<password>' -U '<domain>'/'<user>'%'<password>' -S '<ip>'

Examples

net rpc password 'target_user' 'newPassword123' -U 'CORP'/'admin'%'password' -S '192.168.1.100'

Tags

net rpc password change

bloodyAD add uac Toggle UserAccountControl flags on a target account. Setting DONT_REQ_PREAUTH on a user…
BloodyAD Force Password Change Force password change using BloodyAD
bloodyAD Set Password Reset another user's password if you have ForceChangePassword…
Impacket changepasswd Change an AD user's password via RPC (requires appropriate ACL rights)
Impacket Get-GPPPassword Decrypt Group Policy Preference (GPP) passwords from XML files
NetExec change-password Module Reset a user's password when they are flagged STATUS_PASSWORD_MUST_CHANGE — typical…
NetExec SMB GPP AutoLogin Search Group Policy Preferences for AutoLogon credentials stored in SYSVOL
NetExec SMB GPP Password Search SYSVOL for Group Policy Preference XML files containing encrypted passwords