Re: Change local admin passwords on all domain PCs

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Again, another desktop deployment question...

But it's one that strikes at the root of the problem; and you're being vague. I understand if you don't want to explain every last detail of what you do for security reasons. But...

It seems when you setup and deploy a new machine in the domain, you have to assign a local administrator password on that machine. How can you avoid it? And once you accept that the PC has a local admin password, then, for IT management reasons, it seems you have three choices...

1) same admin password for each machine,
2) random obscure password for each machine that must be written down somewhere,
3) a unigue password for each machine, but one that follows some understandable pattern that IT knows but doesn't have to be written down.

What other options are there?

Correct me if I'm wrong. You ~have~ to have a local admin password in case you have to manage the machine in some circumstance where you can't be authenticated by the domain. Right?



I have seen companies assign the local Administrator password during the build process. They also have a domain user account, which is added to the local Administrators group, that has the necessary permissions to join the PC to the domain and perform post-installation tasks.

But any account that has the necessary permissions to join the domain means 'Administrator' privileges, doesn't it?

Just trying to understand,
Guy

.

Relevant Pages

  • Re: for local admin password (after leaving domain to workgroup)
    ... I believe the only local user ... >domain administrator login. ... >local admin password. ... >and then change the local admin password. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Changed Domain to Workgroup now cant login
    ... You'll need to log in as the local administrator on that computer. ... Administrator or some other local account on that computer. ... know the admin password, hopefully the IT department where you work can tell ... > files from my Win2k work laptop to my XP home computer. ...
    (microsoft.public.win2000.security)
  • Cant change local admin password
    ... local admin password, i cant chage my local password ... policies, but i can change other policies. ... This started after i changed my admin password, ... i cant change the password after that.. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: for local admin password (after leaving domain to workgroup)
    ... local admin password. ... I installed another copy of windows xp pro (also ... know as a parallel install) and do have access to my ... and then change the local admin password. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Create a .reg file to change local admin password
    ... I doubt you can do that with just a .reg file. ... But you can definitely do that with .bat file (or any script you prefer). ... Please be aware of the security hole you may open if you have the admin password in a plain text file. ... > the local admin password to what I want it to be. ...
    (microsoft.public.windowsxp.embedded)