How to Reset Password on Windows Server 2022

To reset password on Windows Server 2022 when RDP no longer accepts the old credential, use the VPS console and Windows installation media to recover the local account. The process usually takes 10–20 minutes, including a required cleanup pass that restores the accessibility executable before you return the server to normal boot.

Prerequisites

• Windows Server 2022, with the system disk attached through a VirtIO storage controller or another virtual storage controller.
• Access to the VPSLake client area, the VPS control panel (Virtualizor), and its VNC console. You need permission to power-cycle the server and mount or eject virtual media.
• A Windows Server 2022 installation ISO and, if the disk is not visible in recovery, a VirtIO driver ISO supplied through your virtualization setup.
• A local administrator account to recover. This method does not reset a Microsoft account or an Active Directory domain password.
• A safe place to create a strong replacement password. Use a long unique value; do not put it in the command line or paste it into a ticket.
• A Windows VPS with administrator access, such as VPSLake Windows RDP hosting, if you need a server for this recovery procedure.

Step 1: Boot Windows Server 2022 into recovery

Windows Recovery Environment gives you a command prompt before the installed system signs in, which is necessary when the normal desktop is unavailable.

Open the server in the VPS control panel and launch its VNC console. Attach the Windows Server 2022 ISO to the virtual CD/DVD drive, reboot the VPS, and choose the virtual CD/DVD device if the panel shows a boot-device prompt. On the setup screen, select the language and keyboard layout, then choose Next → Repair your computer → Troubleshoot → Command Prompt. Microsoft documents this installation-media route in its WinRE troubleshooting guide.

You are now in a temporary recovery environment, so drive letters can differ from those used during a normal boot. If the command prompt opens on X:, that is the recovery image, not your Windows installation.

Step 2: Load the storage driver and identify Windows

WinRE cannot edit the account database until it can see the installed Windows volume.

If diskpart does not show the VPS disk, use the control panel to eject the Windows ISO and attach the VirtIO driver ISO without closing the VNC window. Identify the driver disc letter by checking its contents:

dir D:\
dir D:\viostor /ad

For a current driver ISO, load the Windows Server 2022 x64 storage driver from the matching folder. The common path is:

drvload D:\viostor\2k22\amd64\viostor.inf

If the ISO uses a different Windows-compatible folder name, use the viostor.inf file inside its viostor directory. A successful load reports that the driver was added; then eject the driver ISO and reattach the Windows installation ISO.

List the volumes and leave DiskPart:

diskpart
list volume
exit

Look for the large NTFS volume containing the Windows directory. Confirm the candidate rather than assuming it is C: or E::

dir C:\Windows\System32
dir D:\Windows\System32
dir E:\Windows\System32

The correct result contains files such as cmd.exe and utilman.exe. In the commands below, replace WINDOWS_DRIVE with that drive letter, without the trailing placeholder text—for example, E:.

Step 3: Temporarily open an elevated recovery command

Replacing the accessibility executable lets the sign-in screen start a SYSTEM-level command prompt once; use it only on a server you own or are authorized to administer.

Change to the installed system directory and make a backup before copying the command interpreter into its place. If utilman.exe.bak already exists, stop and use the cleanup step to restore it; do not delete an existing backup.

WINDOWS_DRIVE:
cd Windows\System32
ren utilman.exe utilman.exe.bak
copy cmd.exe utilman.exe

The last command should report that one file was copied. If ren reports that utilman.exe is missing, stop and recheck the drive letter; do not continue against a different volume.

Close Command Prompt, select Continue to boot from the internal disk, and eject the Windows ISO or set the VPS to boot from its virtual disk. At the Windows sign-in screen, select the Ease of access button. A command prompt should open instead of the accessibility panel.

Step 4: Set a new local account password

Using net user with an asterisk keeps the replacement password out of command history and out of the visible console.

First list local accounts so you use the exact name, then reset the intended account interactively:

net user
net user YOUR_LOCAL_USERNAME *

Replace YOUR_LOCAL_USERNAME with the local account name shown by the first command. Type the new password twice when prompted. A successful result is:

Type a password for the user:
Retype the password to confirm:
The command completed successfully.

If the built-in account is disabled, enable it before setting its password:

net user Administrator /active:yes
net user Administrator *

This works for a local account on the installed server. The /domain option is intentionally not used: a domain account must be reset through the domain controller or its approved administration process. See Microsoft’s net user reference for the command’s supported syntax.

Step 5: Restore the accessibility file

Leaving the replacement in place would give anyone who reaches the sign-in screen an elevated command prompt, so restore the original file immediately after the reset.

From the temporary command prompt, reboot into the Windows ISO again and open Repair your computer → Troubleshoot → Command Prompt. Load the VirtIO driver again if the Windows volume is absent, identify the system drive as in Step 2, and run:

WINDOWS_DRIVE:
cd Windows\System32
del utilman.exe
ren utilman.exe.bak utilman.exe

The ren command should complete without an error. Verify that both the restored file and the backup are in the expected state:

dir utilman.exe
if exist utilman.exe.bak echo BACKUP_STILL_PRESENT

The listing should show utilman.exe; BACKUP_STILL_PRESENT should not appear. Eject the ISO, set the VPS to boot from its virtual disk, and choose Continue.

Verify the new Windows Server 2022 password

A successful net user message proves only that Windows accepted the local change; a fresh sign-in proves that the complete recovery worked.

At the normal sign-in screen, select the account you changed and sign in with the new password. Then test a new RDP connection while keeping the VNC session available. For a local account, use SERVER_NAME\YOUR_LOCAL_USERNAME or .\YOUR_LOCAL_USERNAME as the username format; do not use a domain prefix unless this is a domain account.

After signing in, open Start → Windows Tools → Computer Management → Local Users and Groups → Users, or run the following from an elevated terminal:

net user YOUR_LOCAL_USERNAME

The account should show Account active Yes and a recent Password last set value:

Account active               Yes
Password last set            <recent date and time>

Finally, press Windows key + L and confirm that the Ease of access control opens the normal accessibility options, not Command Prompt. That check confirms the temporary recovery change was removed.

Troubleshooting

The Windows volume does not appear in list volume

WinRE is missing the VirtIO storage driver, or the driver ISO is not actually attached. Mount the driver ISO in Virtualizor, inspect the viostor directory, run drvload against the matching amd64\viostor.inf, and then repeat diskpart → list volume. Do not format or initialize a disk from this environment.

ren utilman.exe utilman.exe.bak says the file is not found

You are probably working on X: or another recovery volume instead of the installed Windows volume. Test each candidate drive with dir DRIVE:\Windows\System32\utilman.exe, then use the one that returns the file; if none does, stop and investigate the disk or driver state.

The Ease of access button still opens accessibility tools

The replacement was not copied to the installed system directory, or the server booted from the ISO again. Recheck the drive letter, confirm copy cmd.exe utilman.exe reported one file copied, eject the ISO, and boot from the virtual disk. Do not repeat the reset until the correct volume is confirmed.

net user cannot find the account

The account name may be misspelled, localized, or a domain identity rather than a local user. Run net user by itself and use the exact local name; for a domain account, contact the domain administrator instead of changing files offline.

Hardening after recovery

• Keep the replacement password in a password manager and remove it from temporary notes or clipboard history.
• Restrict RDP to trusted source addresses or a VPN, and avoid exposing the built-in Administrator account unnecessarily.
• Take a provider-level backup or snapshot after confirming the server boots normally, then remove any temporary ISO attachments.

FAQ

Can I reset a Windows Server 2022 domain password this way?

No. The offline net user command targets local accounts in the installed server. Domain credentials are managed by Active Directory and should be reset through the domain controller or the organization’s approved identity-management workflow.

Do I need the VirtIO driver ISO on every VPS?

No. You need it only when WinRE cannot see a disk attached through VirtIO. If diskpart already lists the Windows volume and you can find its Windows\System32 directory, continue without loading a driver.

Will resetting the password disconnect existing RDP sessions?

Not necessarily. Existing sessions can remain active, but every new authentication uses the new password. Keep the VNC console available until a fresh RDP connection succeeds and the accessibility file has been restored.

What if I cannot mount an ISO or open VNC?

The offline method depends on console and virtual-media access. Use another authorized local administrator if one exists, or open a support ticket through the VPSLake client area; do not use an untrusted password-bypass utility.