Results 1 to 9 of 9

Thread: Change password of local Administrator on all workstations in doma

  1. #1
    Marcin Guest

    Change password of local Administrator on all workstations in doma

    Hi,
    How to do this ? I have two propositions:
    1) through GPO ( startup user or computer script )
    2) through script run from server by administrator

    Is any other possibility to do this ?

    Best regards,
    Marcin

  2. #2
    Meinolf Weber [MVP-DS] Guest

    Re: Change password of local Administrator on all workstations in doma

    Hello Marcin,

    With Windows server 2008 Group policy preferences can do it also. Requires
    at least Windows XP or higher OS with Client side extensions installed.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    > Hi,
    > How to do this ? I have two propositions:
    > 1) through GPO ( startup user or computer script )
    > 2) through script run from server by administrator
    > Is any other possibility to do this ?
    >
    > Best regards,
    > Marcin




  3. #3
    Paul Bergson [MVP-DS] Guest

    Re: Change password of local Administrator on all workstations in doma

    There are third party apps out there that will do this for you. I would try
    and avoid a local script (Login script) since the password could get
    revealed. We wrote a script that will change all the remote servers local
    admins. From a centralized machine.

    If you Bing this you should be able to find scripts on the web as well.
    Example below
    http://articles.techrepublic.com.com...1-5198818.html

    --
    Paul Bergson
    MVP - Directory Services
    MCITP - Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewGroups. This
    posting is provided "AS IS" with no warranties and confers no rights.
    "Marcin" <Marcin@discussions.microsoft.com> wrote in message
    news:B824175D-F262-488B-AD5B-D432D9D786E8@microsoft.com...
    > Hi,
    > How to do this ? I have two propositions:
    > 1) through GPO ( startup user or computer script )
    > 2) through script run from server by administrator
    >
    > Is any other possibility to do this ?
    >
    > Best regards,
    > Marcin




  4. #4
    Richard Mueller [MVP] Guest

    Re: Change password of local Administrator on all workstations in doma


    "Marcin" <Marcin@discussions.microsoft.com> wrote in message
    news:B824175D-F262-488B-AD5B-D432D9D786E8@microsoft.com...
    > Hi,
    > How to do this ? I have two propositions:
    > 1) through GPO ( startup user or computer script )
    > 2) through script run from server by administrator
    >
    > Is any other possibility to do this ?
    >
    > Best regards,
    > Marcin


    I prefer the second option. The first option can reveal the password. Also,
    with option 2 you know when the password has been changed on each computer.
    And you don't need to wait for the computer to be started. I have an example
    VBScript program I have used to change local administrator passwords in bulk
    linked here:

    http://www.rlmueller.net/Reset_Local..._Passwords.htm

    This program maintains a "missed" computers text file. If there is no such
    text file, the program attempts to reset the password for all computers in
    the domain. You can start with a list of computer NetBIOS names to limit the
    scope. If any computers cannot be contacted, they are added to a new
    "missed" computer list. You can run the program repeatedly until the
    "missed" computer list is empty.

    --
    Richard Mueller
    MVP Directory Services
    Hilltop Lab - http://www.rlmueller.net
    --



  5. #5
    Marcin Guest

    Re: Change password of local Administrator on all workstations in

    > With Windows server 2008 Group policy preferences can do it also. Requires
    > at least Windows XP or higher OS with Client side extensions installed.


    Thank you for answer. Could you point any article how to use
    ClientSideExtensions especially to set local admin password ?

    Is it possible to use CSE in 2003 domain ( without any 2008 DC )?

    Best regards,
    Marcin

  6. #6
    Meinolf Weber [MVP-DS] Guest

    Re: Change password of local Administrator on all workstations in

    Hello Marcin,

    Client side extensions must be installed on XP, so they are able to work
    with Group policy preferences. In a pure Windows server 2003 domain you can't
    use them. At least one Windows server 2008, member server is sufficient,
    is needed.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    >> With Windows server 2008 Group policy preferences can do it also.
    >> Requires at least Windows XP or higher OS with Client side extensions
    >> installed.
    >>

    > Thank you for answer. Could you point any article how to use
    > ClientSideExtensions especially to set local admin password ?
    >
    > Is it possible to use CSE in 2003 domain ( without any 2008 DC )?
    >
    > Best regards,
    > Marcin




  7. #7
    Marcin Guest

    Re: Change password of local Administrator on all workstations in

    First Thanks all for answer and scripts. I will use one of them.

    Meinolf Weber [MVP-DS]
    How to use Client Side Extensions with change password? Is it possible to
    use it in 2003 enviroment ( DC are ona Windows 2003 but I have some Windows 7
    in network )

    Paul Bergson [MVP-DS]
    Why don't you think that password could be revealed ? In GPO permissions
    with that script I clean read and apply for authenticated users and add only
    permissions to workstations. How user can get password ?

    Best regards,
    Marcin

  8. #8
    Paul Bergson [MVP-DS] Guest

    Re: Change password of local Administrator on all workstations in

    People are smarter than you think. I just wouldn't trust it, but that is
    me. Plus, you never know who has logged on or off on a machine and then you
    start to have multiple passwords, if you run a remote script you can report
    on who has or hasn't been changed much easier.

    Your enterprise do as you see fit, but I would manage remotely.

    --
    Paul Bergson
    MVP - Directory Services
    MCITP - Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, MCP, Security +, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    Microsoft's Thrive IT Pro of the Month - June 2009

    http://www.pbbergs.com

    Please no e-mails, any questions should be posted in the NewGroups. This
    posting is provided "AS IS" with no warranties and confers no rights.
    "Marcin" <Marcin@discussions.microsoft.com> wrote in message
    news:B14A82FE-A831-43E8-8C41-A83B02B5F4F9@microsoft.com...
    > First Thanks all for answer and scripts. I will use one of them.
    >
    > Meinolf Weber [MVP-DS]
    > How to use Client Side Extensions with change password? Is it possible to
    > use it in 2003 enviroment ( DC are ona Windows 2003 but I have some
    > Windows 7
    > in network )
    >
    > Paul Bergson [MVP-DS]
    > Why don't you think that password could be revealed ? In GPO permissions
    > with that script I clean read and apply for authenticated users and add
    > only
    > permissions to workstations. How user can get password ?
    >
    > Best regards,
    > Marcin




  9. #9
    Meinolf Weber [MVP-DS] Guest

    Re: Change password of local Administrator on all workstations in

    Hello Marcin,

    Client side extensions only cannot be used to change paswords , you must
    them use together with the new windows OS version.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


    > First Thanks all for answer and scripts. I will use one of them.
    >
    > Meinolf Weber [MVP-DS] How to use Client Side Extensions with change
    > password? Is it possible to use it in 2003 enviroment ( DC are ona
    > Windows 2003 but I have some Windows 7 in network )
    >
    > Paul Bergson [MVP-DS]
    > Why don't you think that password could be revealed ? In GPO
    > permissions
    > with that script I clean read and apply for authenticated users and
    > add only
    > permissions to workstations. How user can get password ?
    > Best regards,
    > Marcin




Similar Threads

  1. Replies: 4
    Last Post: 29-12-2010, 11:20 AM
  2. Change local administrator password on a DC
    By Jahbriel in forum Active Directory
    Replies: 1
    Last Post: 10-08-2009, 06:06 PM
  3. Reset local Administrator password
    By Ammad Shah in forum Windows Server Help
    Replies: 5
    Last Post: 08-08-2009, 04:22 AM
  4. Replies: 3
    Last Post: 29-06-2009, 12:21 PM
  5. Replies: 3
    Last Post: 22-04-2007, 02:10 AM

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Page generated in 1,718,208,750.62803 seconds with 17 queries