i don't have sms, i'm on a win2k native domain with 2000pro workstations..

is there a policy or some way i can change all the local admin pwd's on all
these boxes without touching all 500?


thanks

We had no success trying to accomplish this through AD or
policies. You can change the local admin account name,
though.

We each had to take a group and manage each system to
change the password.

I would love to know if there's a way to do this, too.
It's time to change all 480 on our network!

Diane

>-----Original Message-----
>i don't have sms, i'm on a win2k native domain with
2000pro workstations..
>
>is there a policy or some way i can change all the local
admin pwd's on all
>these boxes without touching all 500?
>
>
>thanks
>
>
>
>
>.
>

If you are going to change the passwords to the same password you can use a Group
Policy startup script using "net administrator newpassword". Startup scripts are
machine policy and you can use different script per OU GPO. Of course the change will
not apply until the computer is rebooted. You can also remove the everyone/users
group from permissions to that startup script so that they can not navigate to the
sysvol share and read it, but make sure that the domain computers group has
permissions to the script. If you need to use different passwords for each computer,
then create a batch file using cusrmgr as described in the KB below. --- Steve

http://support.microsoft.com/default...b;en-us;272530

"Jason" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> i don't have sms, i'm on a win2k native domain with 2000pro workstations..
>
> is there a policy or some way i can change all the local admin pwd's on all
> these boxes without touching all 500?
>
>
> thanks
>
>
>
>

Steve! Excellent information!

does this work even though the local user is a Domain/Local User and not a
local admin?

Thanks

Jason


"Steven L Umbach" <(E-Mail Removed)> wrote in message
news:dp57c.49751$1p.835054@attbi_s54...
> If you are going to change the passwords to the same password you can use
a Group
> Policy startup script using "net administrator newpassword". Startup
scripts are
> machine policy and you can use different script per OU GPO. Of course the
change will
> not apply until the computer is rebooted. You can also remove the
everyone/users
> group from permissions to that startup script so that they can not
navigate to the
> sysvol share and read it, but make sure that the domain computers group
has
> permissions to the script. If you need to use different passwords for each
computer,
> then create a batch file using cusrmgr as described in the KB below. ---
Steve
>
> http://support.microsoft.com/default...b;en-us;272530
>
> "Jason" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > i don't have sms, i'm on a win2k native domain with 2000pro
workstations..
> >
> > is there a policy or some way i can change all the local admin pwd's on
all
> > these boxes without touching all 500?
> >
> >
> > thanks
> >
> >
> >
> >
>
>

It will work on any LOCAL machine account and I need to correct myself as the command
would be "net user administrator newpassword" as an example. Domain accounts will
need to be changed via Active Directory. The net commands are very helpful. Run net
help "command" to find nmore information on the command such as net help user. ---
Steve


"Jason" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Steve! Excellent information!
>
> does this work even though the local user is a Domain/Local User and not a
> local admin?
>
> Thanks
>
> Jason
>
>
> "Steven L Umbach" <(E-Mail Removed)> wrote in message
> news:dp57c.49751$1p.835054@attbi_s54...
> > If you are going to change the passwords to the same password you can use
> a Group
> > Policy startup script using "net administrator newpassword". Startup
> scripts are
> > machine policy and you can use different script per OU GPO. Of course the
> change will
> > not apply until the computer is rebooted. You can also remove the
> everyone/users
> > group from permissions to that startup script so that they can not
> navigate to the
> > sysvol share and read it, but make sure that the domain computers group
> has
> > permissions to the script. If you need to use different passwords for each
> computer,
> > then create a batch file using cusrmgr as described in the KB below. ---
> Steve
> >
> > http://support.microsoft.com/default...b;en-us;272530
> >
> > "Jason" <(E-Mail Removed)> wrote in message
> > news:(E-Mail Removed)...
> > > i don't have sms, i'm on a win2k native domain with 2000pro
> workstations..
> > >
> > > is there a policy or some way i can change all the local admin pwd's on
> all
> > > these boxes without touching all 500?
> > >
> > >
> > > thanks
> > >
> > >
> > >
> > >
> >
> >
>
>