Hi mmorse - you are SO right... could have just left the domain....
have wasted the morning on this!! (honestly didnt think the admin console was directly related to the email address!)
Thanks for the help.
Updated the acct to an admin, then tried to run new password with:
zmprov sp testadmin@domain.com NEW_PASSWORD
do i have to do --
zmprov sp testadmin@domain.com NEW_PASSWORD my-new-password
if I leave that blank (ie just what you suggested i run) does it leave the password blank?
One more question (related) --
If I overstep my max. allowed incorrect logins in the admin console (as per the defaults - ie 10 in any given hour) can I reenable the account from the CLI? (even if its an admin acct?)