contains
Cusrmgr.exe, a command-line tool that:
"enables editing of many of the properties available through the Local Users and Groups,
a Microsoft® Windows® 2000 system tool that is part of the Computer Management MMC snap-in.
With CusrMgr, you can rename or delete users, set passwords, and set or reset other user properties.
For Microsoft® Windows NT® version 4.0, CusrMgr offers command-line access to User Manager's "User" and "User Profile" properties."
The Cusrmgr syntax is:
cusrmgr -u UserName [-m \\ComputerName] [{-r UserName | -d NewUserName}]
[{-p | -P Password}] [-rlg OldGroupName NewGroupName]
[-rgg OldGroupName NewGroupName] [-alg LocalGroupName]
[-agg GlobalGroupName] [-dlg LocalGroupName]
[-dgg GlobalGroupName] [-c Comment] [-f FullName]
[-U UserProfile] [-n LogonScript] [-h HomeDir]
[-H HomeDirDrive] [{+s | -s} Property]Where:
-u UserName specifies the user account on which to perform the operation. This switch is case-sensitive: it takes a lower-case u.
-m \\ComputerName defaults to the local computer.
-r UserName renames user specified with -u to NewUserName.
-d UserName deletes user UserName.
-p sets a random password. This switch is case-sensitive: it takes a lower-case p.
-P Password sets password to Password. This switch is case-sensitive: it takes a capital P.
-rlg OldGroupName NewGroupName renames local group OldGroupName to NewGroupName.
-rgg OldGroupName NewGroupName renames global group OldGroupName to NewGroupName.
-alg LocalGroupName adds user specified by -u UserName to local group LocalGroupName.
-agg GlobalGroupName adds user specified by -u UserName to global group GlobalGroupName.
-dlg LocalGroupName deletes user specified by -u UserName from local group LocalGroupName.
-dgg GlobalGroupName deletes user specified by -u UserName from global group GlobalGroupName.
-c Comment sets Comment property to Comment.
-f FullName sets FullName property to FullName.
-U UserProfile sets UserProfile property to UserProfile. This switch is case-sensitive: it takes a capital U.
-n LogonScript sets LogonScript property to LogonScript.
-h HomeDir sets HomeDir property to HomeDir. This switch is case-sensitive: it takes a lower-case h.
-H HomeDirDrive sets HomeDirDrive property to HomeDirDrive. This switch is case-sensitive: it takes a capital H.
+s Property sets Property property, where Property can be any of the following properties:
MustChangePassword
CanNotChangePassword
PasswordNeverExpires
AccountDisabled
AccountLockout
RASUser
-s Property resets any of the properties that can be set with +s.
If the command is successful, Cusrmgr set an ERRORLEVEL of 0.
Examples:
Setting a new password for a user on the local computer
cusrmgr -u UserName -P NewUserPassword
Setting "User must change Password at next login" property for a user on the local computer
cusrmgr -u UserName +s MustChangePassword
Setting a new password for a user at the domain level, where \\PdcName is the primary domain controller
of the domain to which the UserName belongs.
cusrmgr -u UserName -P NewUserPassword -m \\PdcName
Setting "User must change Password at next login" property for a user at the domain level
cusrmgr -u UserName +s MustChangePassword -m \\PdcName