Mimikatz tool
Dump Hashes
DCSync Attack
reset the account to the previous password after finishing assessment if we have the NTLM of the old pass