Re: Reset the passwords for 100s of user accounts

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Evan Erwee [MVP] (evan_at_erwee.com.REMOVE)
Date: 04/20/04

  • Next message: anonymous_at_discussions.microsoft.com: "Re: Moving users from Win2000 AD to ADAM how to???"
    Date: Tue, 20 Apr 2004 22:30:39 +0200
    
    

    You could use a CMD file.

    Example

    Create a file with all the logonnames. In my example I have used
    'UserList.in'. Put this file in a directory, e.g. c:\PsswReset.

    The 'UserList.in' look's like this:

    UserA
    UserB
    UserC

    You can export this from Excel.

    Then creat a batch file in the same directory called: 'ResetPW.cmd'

    The 'ResetPW.cmd' look like this;

    @echo off
    FOR /F "eol= " %%i in (UserList.in) do NET USER %%i SomePssw /DOMAIN

    The batch file will loop thru all the user resseting their passwords to
    'SomePssw'. Extend the batch file to do other user functions.

    You will notice the following event in the eventlog if 'success' auditing is
    enabled.

    Event Type: Success Audit
    Event Source: Security
    Event Category: Account Management
    Event ID: 642
    Date: 4/20/2004
    Time: 10:27:52 PM
    User: NT AUTHORITY\SYSTEM
    Computer: SRV01
    Description:
    User Account Changed:
      Target Account Name: UserA
      Target Domain: INTERNAL
      Target Account ID: INTERNAL\UserA
      Caller User Name: SRV01$
      Caller Domain: INTERNAL
      Caller Logon ID: (0x0,0x3E7)
      Privileges: -
     Changed Attributes:
      Sam Account Name: -
      Display Name: -
      User Principal Name: -
      Home Directory: -
      Home Drive: -
      Script Path: -
      Profile Path: -
      User Workstations: -
      Password Last Set: 4/20/2004 10:27:52 PM
      Account Expires: -
      Primary Group ID: -
      AllowedToDelegateTo: -
      Old UAC Value: -
      New UAC Value: -
      User Account Control: -
      User Parameters: -
      Sid History: -
      Logon Hours: -

    For more information, see Help and Support Center at
    http://go.microsoft.com/fwlink/events.asp.

    "SizzleMaster" <larry@datasculpting.com> wrote in message
    news:O$O6mlwJEHA.1764@TK2MSFTNGP12.phx.gbl...
    > I've imported 100s of accounts from Excel into AD on a Win2003 Ent.
    Edition
    > Server. I can't utilize the "user must change password on next login"
    > option for what I'm using these accounts for (if set that way, they can't
    > log in at all into a SharePoint website, don't know why).
    >
    > Is there any way to reset their passwords to a single password in one fail
    > swoop without doing them individually?
    >
    > Thanks for any assistance.
    >
    >


  • Next message: anonymous_at_discussions.microsoft.com: "Re: Moving users from Win2000 AD to ADAM how to???"

    Relevant Pages

    • Re: Account lockouts
      ... for reusable passwords and the AAA infrastructures that rely upon them? ... In that context, account lockout policy -- duration, threshold, lockout ... > cracking attacks. ...
      (microsoft.public.security)
    • Re: Deleting Admin Account
      ... administrative level account to change the Type of the Admin account ... created to a limited account (or create yourself a third account - non-admin ... The built-in administrator cannot be changed from the administrative level, ... You should password protect (with different passwords would be best) each ...
      (microsoft.public.windowsxp.setup_deployment)
    • Re: Blank Passwords, Complex Requeirements and Problems...
      ... The account would then have: 544 = normal account with "Password Not Required" bit = on ... wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... As far as i know, the Win2003 AD never had a "free" Default Domain Policy to allow that, the DDP is the Default since the initial build of th AD. Ok, let's say that an Admin disabled temporarily th DDP for a few moments and allowed certain accouns to be created with blank passwords. ...
      (microsoft.public.win2000.active_directory)
    • Re: OT: dealing with keystroke loggers
      ... what's the practical solution to deal with s/w keystroke loggers ... Researcher refutes Microsoft's account of hijacked Hotmail passwords ... passwords were obtained in a massive phishing attack. ... "Everyone who suspects that their account has been compromised should ...
      (alt.sys.pc-clone.dell)
    • RE: Threat vector of running a service using a domain account
      ... Cachedumps are for local logon password dumps. ... Lsadumps retrieve the passwords in plaintext (each char. ... Cachedump, which again, doesn't work so well against the latest versions ... Threat vector of running a service using a domain account ...
      (Security-Basics)