Where can a domain user account's password be reset on a Windows Server?

A domain user account's password can be reset in Active Directory Users and Computers. This tool is specifically designed for administrators managing domain accounts. It allows them to easily search for user accounts, view account properties, and reset passwords as needed.

When working in a domain environment, the Active Directory Users and Computers console provides a centralized interface for managing user accounts, including password resets, account lockouts, and changes to account properties. This is vital for maintaining security and managing user access efficiently across the network.

In contrast, local security policy pertains to settings that affect the local computer rather than the domain. Local users and groups is limited to managing accounts on the local machine only, which means it cannot reset a password for a domain user account. Group Policy is a set of rules that dictate user and computer settings within a domain but does not directly provide functionality for resetting passwords.