How to change administrator passwords?

July 07th, 2006 - 04:56 pm ET by boomboom999 | Report spam
Windows XP/2003, Active Directory, SMS 2003


How can I change regularly the local administrator's password on 4000
workstations?


GPO? SMS?


Option 1 - Use SMS or GPO for that purpose


In that case, I will need to place the password in SMS packages or in
GPO scripts which is not good because the SMS packages and GPO scripts
can be read by users and the password can be easily discovered.


Option 2 - Use some script that goes thru AD and changes the password
remotely on all PCs, one by one


That seems to be a good idea but not all workstations are static. There

are laptops. So, sometimes they are absent so they will miss the
password change quite often.


Any idea or advice?
email Follow the discussionReplies 2 repliesReplies Make a reply

Replies

#1 Ken Aldrich
July 19th, 2006 - 03:08 pm ET | Report spam
DSRAZOR for Windows has an applet that makes doing this really easy.
Changing the local admin password is as easy as changing the password on a
user account in your Active Directory.

You drill down to the OU with the computer accounts in Active Directory (or
search your whole domain), do a shift-select to select all machines (or just
select the ones you want), and press the Reset Password button. Enter your
password and click OK.
It does not matter if you have renamed your local administrator accounts, it
looks for the local user account with SID ending in 500.

If you would like a free personalized web demonstration of this or a free
trial, look for us here:
www.visualclick.com/?source=localadminpass071906

Ken Aldrich
DSRAZOR for Windows
Visual Click Software, Inc.
www.visualclick.com

wrote in message
news:
Windows XP/2003, Active Directory, SMS 2003


How can I change regularly the local administrator's password on 4000
workstations?


GPO? SMS?


Option 1 - Use SMS or GPO for that purpose


In that case, I will need to place the password in SMS packages or in
GPO scripts which is not good because the SMS packages and GPO scripts
can be read by users and the password can be easily discovered.


Option 2 - Use some script that goes thru AD and changes the password
remotely on all PCs, one by one


That seems to be a good idea but not all workstations are static. There

are laptops. So, sometimes they are absent so they will miss the
password change quite often.


Any idea or advice?



Similar topics