Local Admin Password change through GPO

G

Guest

Is there a way to change the local Administrative password
on all systems in an OU by using a GPO?
 
B

Brian Desmond [MVP]

There is not a way to change the password via a gpo. You can only change the
administrator username.

What I would do is create a batch file with a line like this:

net user Administrator SomePassword

and then assign this batch file as a startup script. The local machines will
reset the admin password to SomePassword on startup.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com
 
M

me

Will this batch file stay on the local machine?
Or will it get deleted after it executed.

.... I wouldnt want users to find the batch and retrieve the password
;)
 
P

Philip Nunn

FYI there is a way to change the local admin password for W2K or XP domain
computers. You have to configure your GPO for a "computer startup script"
this is what my .bat startup script looks like for our domain when i want to
change the computer passwords.

@echo off
if exist %windir%\cusrmgr.exe goto CHANGE
copy \\<SeverName>\netlogon\cusrmgr.exe %windir%\cusrmgr.exe
:CHANGE
%windir%\cusrmgr.exe -u administrator -P <Enter password here>
EXIT

You can get a copy of "cusrmgr.exe" from Microsoft for download or i think
it is also available on the W2k resource kit. Hope it helps!

Philip Nunn
 
B

Brian Desmond [MVP]

Phil-

You can do this with the net program which is on all client machines. See my
reply to the original post.

--
--
Brian Desmond
Windows Server MVP
(e-mail address removed)12.il.us

Http://www.briandesmond.com
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top