Using Cusrmgr.exe Tool to Change Administrator Account Password

[Guest]

Hi,

I need to change the local admin password on multiple computers on my
network. I know I can use Cusrmgr.exe to do it, but most of my network
computers have the firewall enabled. Anyone know how I can bypass this?
Would it work using a script instead? I found this online;

'--------------------8<----------------------
sNewPassword = "testpassword"
Set oWshNet = CreateObject("WScript.Network")
sComputer = oWshNet.ComputerName

On Error Resume Next
Set oUser = GetObject("WinNT://" & sComputer & "/Administrator,user")
oUser.ChangePassword "old pwd here", sNewPassword
oUser.SetInfo
On Error Goto 0
'--------------------8<----------------------

Not quite sure what I would need to change in it. I know I would need to
change testpassword, ComputerName, old pwd here, sNewPassword, but not sure
of the rest. Any help will be greatly appreciated.

TIA

tj

 

[Steven L Umbach]

If you are in an Active Directory domain you can use Group Policy "startup
scripts" using simple batch files that use the net user command or other
scripts. Since startup scripts run as system context users do not need read
access to them and you can remove them but make sure domain computers have
read permissions to the file. Below is a past post from Torgeir Bakken (MVP)
that should help. Also you might consider modifying the Windows Firewalls
to accept traffic from only the IP addresses of administrator workstations
so that you can do such tasks. Group Policy could also do such as a
temporary change if you do not want to leave those IP addresses available
all the time or the computers could be configured to require ipsec from
those IP addresses. --- Steve

http://groups.google.com/group/micr...password+change&rnum=1&hl=en#b310cdf3dadb6ddd

 

[Guest]

Thanks alot!

If you are in an Active Directory domain you can use Group Policy "startup
scripts" using simple batch files that use the net user command or other
scripts. Since startup scripts run as system context users do not need read
access to them and you can remove them but make sure domain computers have
read permissions to the file. Below is a past post from Torgeir Bakken (MVP)
that should help. Also you might consider modifying the Windows Firewalls
to accept traffic from only the IP addresses of administrator workstations
so that you can do such tasks. Group Policy could also do such as a
temporary change if you do not want to leave those IP addresses available
all the time or the computers could be configured to require ipsec from
those IP addresses. --- Steve

http://groups.google.com/group/micr...password+change&rnum=1&hl=en#b310cdf3dadb6ddd