How to Unlock Windows Passwords With a Domain

1. Log in to a computer on the domain with a Domain Admin account. Typically, aside from the Administrator account, one or more users who have the responsibility of administering the Windows system will have Domain Admin privileges. In larger environments, there may be an entire team dedicated to end-user issues like this.
2. Go to the Start Menu and then to Administrative Tools (sometimes located in the Programs menu) and open 'Active Directory Users and Groups.' If that program is not present, you may need to install it. This can typically be done as an additional component from Windows Professional or Business install media, like a CD or DVD, but typically is automatically installed when a Domain Admin logs in.
3. Locate the domain group on the left-hand side of the Window and expand it, then open the Users folder. The Domain Users will appear on the right hand side, listed alphabetically. Locate the user whose password needs to be reset or unlocked.
4. Right-click on the account that needs service. If the account is disabled you will have the option here in the context menu to enable it again. Otherwise, select the menu option 'Reset Password.'
5. Enter a new, temporary password, then confirm it in the next box down. Leave checked the option 'User must change password at next login' so that the user is forced to create a new password, known only to him or her, the next time the user logs into the computer.