Change Password via Kerberos (Invoke-RubeusChangepw)

Description

Changes or resets a user's password using Kerberos change-password protocol.

Overview

Changes or resets a user’s password using the Kerberos change-password protocol (RFC 3244). Requires a valid TGT for the target user (or a privileged account for resets). Can target a specific user for password resets when using a privileged ticket.

Arguments

Parameter Type Description
Ticket string The base64-encoded TGT ticket for authentication.
NewPassword string The new password to set.
DC string The domain controller to target.
TargetUser string The user whose password to reset (requires privileged ticket).

Dependencies

  • AD

Operating Systems

  • Windows
Scroll to Top