samba - May 2025 - procedure to change DC password

Hello,

net ads changetrustpw

this command works fine on domain members, but on domain controller 
there is hard fail with:

ads_change_trust_account_password: Machine account password change only 
supported on a DOMAIN_MEMBER


W dniu 23.04.2025 o?15:32, Rowland Penny via samba
pisze:
> net ads changetrustpw
-- 
Ta wiadomo?? e-mail zosta?a sprawdzona pod k?tem wirus?w przez oprogramowanie
antywirusowe Avast.
www.avast.com

Hi Kacper,

maybe you've overlooked my answer from April 23th.

Kees has written a script especially for this:
See "dc_password_change" on 
https://github.com/kvvloten/samba_integrations/tree/main/domain_controller/manage_scripts

This script works in my AD without problems for some time...

Regards
Ingo
https://github.com/WAdama


Kacper Wirski via samba schrieb am 02.05.2025 um 22:15:
> Hello,
>
> net ads changetrustpw
>
> this command works fine on domain members, but on domain controller 
> there is hard fail with:
>
> ads_change_trust_account_password: Machine account password change 
> only supported on a DOMAIN_MEMBER
>
>
> W dniu 23.04.2025 o?15:32, Rowland Penny via samba pisze:
>> net ads changetrustpw
>