Re: Change local administrator password ? through GPO or push script ?

Hello Pascal,

Maybe try this one. Create a batch file pass.bat (or whatever) with the content

net user administrator %1 (%1 describes the first entry in the parameter field)

OR

net user %1 %2 (you also can use %1 %2 and add "Username Password" in the parameter field (be aware of the space))

Add this file via GPO to the Default domain policy>Computer configuration>Windows settings>Scripts, STARTUP script and set the parameter with the new parameters you like to use. At the next time the workstation starts up in the domain the local admin password get changed.
The password will only be visible for your domain admins not for the normal user even if he has adminpak installed. The GPO he can not open as a normal user.

Best regards

Myweb
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.

Hi,

I would like to change the local administrator password of every
computers member of my AD domain but I am not sure of the best method.

Method 1 : Create a vbs script that points to the local computer (".")
and then deploy this script by GPO.

Problem : The password is not encrypted at all and could be
potentially read by any users. The solution to encrypt in vbe is not a
solution neither because, as far as I know, it is quite easy to
decrypt it.

Method 2 : A script executed by an administrator that scan computers
accounts on the domain and then "push" the new password to them.

Problem : If a computer is not connected when the admin launch the
script, the old password will still remain.

To my opinion, the first method could be the best solution (less
administrative effort) if I found a way to secure the script.

What method are you using ? Do you have any advices ? :D

Thank you



.

Relevant Pages

  • Re: How could i change all the local administrator password of my XP/2000 computers ??
    ... How could i change all the local administrator password of my XP/2000 computers ?? ... I have 200 computers with a local password that everybody know and i would like to change it ... ... You could do it in a computer startup script that runs ...
    (microsoft.public.windowsxp.general)
  • Re: Change local administrator password ? through GPO or push script ?
    ... I would like to change the local administrator password of every computers member of my AD domain but I am not sure of the best method. ... Create a vbs script that points to the local computer and then deploy this script by GPO. ... This attribute will permit to know wich admin password is configured for this machine. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Change local administrator password ? through GPO or push script ?
    ... I would like to change the local administrator password of every computers ... A script executed by an administrator that scan computers ... Domain Computers permissions for the script, ...
    (microsoft.public.windows.server.active_directory)
  • WinXP Pro and prevent SHUTDOWN.EXE remote shutdown
    ... Our system administrator does not allow computers to stay running and logged ... Therefor he wrote a script that remotely shuts down all ... How can I prevent the usage of the remote shutdown on my WinXP Pro SP2 ...
    (microsoft.public.windows.server.general)
  • Re: printuientry
    ... you could put it into a logon script. ... The error did not occur as a network administrator. ... I've tried several variations on the command syntax and can not get it ... >> printer is already defined on a "local port", ...
    (microsoft.public.win2000.printing)
Loading