Reset Local Admin using AD Group Policy

Hello,

We have 1000 workstations and we need to reset all local admin account in
every workstation. Is it possible to reset that account using AD group policy
so I don't need to reset the password individually?

Thanks.

Hello Jon,

If you have at least one Vista or 2008 machine in the domain and XP or higher,
then you can use the new Group policy preferences. Also you have to install
on all clients the Client Side extensions.

If you have that not you have ot use a script like this ones:
http://www.frickelsoft.net/blog/?p=59

http://www.microsoft.com/technet/scr...7/hey0703.mspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> We have 1000 workstations and we need to reset all local admin account
> in every workstation. Is it possible to reset that account using AD
> group policy so I don't need to reset the password individually?
>
> Thanks.
>

Hello,

Thank you for the info I'll try it.

Thanks.

"Meinolf Weber" wrote:

> Hello Jon,
>
> If you have at least one Vista or 2008 machine in the domain and XP or higher,
> then you can use the new Group policy preferences. Also you have to install
> on all clients the Client Side extensions.
>
> If you have that not you have ot use a script like this ones:
> http://www.frickelsoft.net/blog/?p=59
>
> http://www.microsoft.com/technet/scr...7/hey0703.mspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello,
> >
> > We have 1000 workstations and we need to reset all local admin account
> > in every workstation. Is it possible to reset that account using AD
> > group policy so I don't need to reset the password individually?
> >
> > Thanks.
> >
>
>
>

Jon,

Jon wrote:
> We have 1000 workstations and we need to reset all local admin account in
> every workstation. Is it possible to reset that account using AD group policy
> so I don't need to reset the password individually?

Are those machines on GP Preferences (CSE installed already?). If so,
you could also use the GPPreference way:
http://www.frickelsoft.net/blog/?p=116

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

Hi
-I not disable all local admin accounts using GPO?
-You've diferent options to do that, I don't think that GPO would help you
on that. But you could use a script that does the job. To prevent running
scripts in the network against all machines and exposing the script content,
you could use Psexec with a list of computers that the script would run.

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jon" <Jon@discussions.microsoft.com> wrote in message
news:8322D878-4ABD-4DC8-901F-740F6A28B214@microsoft.com...
> Hello,
>
> We have 1000 workstations and we need to reset all local admin account in
> every workstation. Is it possible to reset that account using AD group
> policy
> so I don't need to reset the password individually?
>
> Thanks.