Find valid credentials, but the password will be expired. This presents a challenge, because the credentials are of limited use until they are reset.

Untitled

smbpasswd probably the most simple way to perform a reset remotely, though it does have some conditions.  To perform the reset, simply provide the remote host with the -r flag and the username with the -U flag.

smbpasswd -r 10.10.111.35 -U 'caroline.robinson'

Untitled

Untitled

netexec smb DC.sendai.vl -u Thomas.Powell -p '' -M change-password -o NEWPASS=0xdf0xdf