Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Change local Admin Pwd - [WP]

17 views
Skip to first unread message

WILDPACKET

unread,
Jan 26, 2007, 9:46:01 AM1/26/07
to

How can I change local admin pwd w/o going to the machines? I don't wont my
pwd to be visible if I am pushing via GPO, BAT or Script?

How would Microsoft do this, do they rely on third party, my guess No????

Advise Please.

Thanks,

jwd

unread,
Jan 26, 2007, 10:53:00 AM1/26/07
to

You can change a local users password remotely by ctrl-alt-del on a PC that
has a network connection to the remote PC. Then go to the change password
screen and enter the username and then the name of the remote computer in the
Logon on to field. Change the password as normal assuming you know the old
password.

I appreciate this will not be ideal if you have a large number to change.

Best Regards
Joe Dunn MCSE

Adam

unread,
Jan 26, 2007, 11:54:03 AM1/26/07
to
I know you didnt want to use a .bat script but it is the easiest method and
if included in a group policy as a startup script, the users will not see it
run.


"WILDPACKET" <WILDP...@discussions.microsoft.com> wrote in message
news:D523C493-BD47-4B0E...@microsoft.com...

Jack Doyle

unread,
Jan 30, 2007, 1:06:27 PM1/30/07
to
Desktop Authority from ScriptLogic (http://www.scriptlogic.com/da) has
the ability to change Administrator passwords on your client
computers. It is not stored in clear text anywhere, either.

Jack Doyle, Systems Engineer
ScriptLogic Corporation
http://www.scriptlogic.com

kj

unread,
Jan 30, 2007, 1:21:07 PM1/30/07
to
cusrmgr from the W2K res kit will do this, and somewhere there's a VB Script
that I think Paul wrote and posted here perhaps 6 months ago. I'll see if I
can find it.

--
/kj


"WILDPACKET" <WILDP...@discussions.microsoft.com> wrote in message
news:D523C493-BD47-4B0E...@microsoft.com...
>

Romanus

unread,
Jan 30, 2007, 3:23:52 PM1/30/07
to
On Jan 30, 11:21 pm, "kj" <k...@nowhere.com> wrote:
> cusrmgr from the W2K res kit will do this, and somewhere there's a VB Script
> that I think Paul wrote and posted here perhaps 6 months ago. I'll see if I
> can find it.
>
> --
> /kj"WILDPACKET" <WILDPAC...@discussions.microsoft.com> wrote in message
You can try Desktop Central's User Management which can change the
password without sending it as a script/bat/plain text. Additionally
you'll get the status update for the actions which you have performed
on the target machines.

Romanus
Sr. Technical Consultant
http://www.desktopcentral.com

kj

unread,
Jan 30, 2007, 4:24:31 PM1/30/07
to
The script runs from an admin workstation NOT as a login script (viewable to
the snoopy user). Same with Cusrmgr. Neither method permit anyone to see the
password.

--
/kj
"Romanus" <romanu...@gmail.com> wrote in message
news:1170188632.0...@k78g2000cwa.googlegroups.com...

kj

unread,
Jan 30, 2007, 4:34:44 PM1/30/07
to
One of these days I gotta find a better way to "file" these gems.

--
/kj

"Paul Williams [MVP]" <ptw...@hotmail.com> wrote in message
news:<11400788...@ernani.logica.co.uk>...
> CUSRMGR huh? Well, I didn't not know that! Would have saved me 80

> minutes writing this -

>

> ' ***************************************************************

> ' * ResetAllPasswords.vbs *

> ' * *

> ' * Paul Williams, msresource.net, January 2006 *

> ' * *

> ' * Script pulls all computer accounts from the [default] *

> ' * domain and resets the local administrator password on each * ' *

> one. Some of the computers might be offline, or there may * ' * no

> longer be an actual computer for the computer object in * ' * the

> directory. Therefore, a tab-separated file is created * ' *

> indicating success or failure, as well as the debug log. *

> ' * *

> ' * Success is measured by the script not being in a state of *

> ' * error on the current iteration of the record set. *

> ' * *

> ' * Filenames are constants, and the password is a variant *

> ' * defined if and when the record set is successfully *

> ' * returned. *

> ' * *

> ' * Version: 1.1.1. *

> ' * Last updated: 21-01-2006 *

> ' * Last updated by: Paul Williams *

> ' * *

> ' ***************************************************************

> Option explicit

> On error resume next

>

> ' define constants

> const bDebugFlag = true

> const LOG_FILE_NAME = "ResetAllPasswordsLog.txt"

> const ROLLBACK_LOG_NAME = "ResetAllPasswordsRollback.txt"

>

> ' define variants

> dim oRootDse,oConnection,oCommand,oRs

> dim sBase,sFilter,sAttrs,sScope,sQuery

> dim oFso,logf,log2

>

> ' instantiate objects

> set oFso=createObject("Scripting.fileSystemObject")

> set logf=oFso.createTextFile(LOG_FILE_NAME,true)

> set log2=oFso.createTextFile(ROLLBACK_LOG_NAME,true)

> set oRootDse=getObject("LDAP://RootDSE")

> set oConnection=createObject("ADODB.Connection")

> set oCommand=createObject("ADODB.Command")

>

> ' configure connection and command

> oConnection.provider="ADsDSOObject"

> oConnection.open"Active Directory Provider"

>

> ' configure command to use active connection

> oCommand.activeConnection=oConnection

>

> ' define filter

> sBase = "<LDAP://"&oRootDse.get("defaultNamingContext")&">;"

> sFilter =

> "(&(objectCategory=computer)(!operatingSystem=*server*)(!primaryGroupID=516));"

> sAttrs = "distinguishedName,cn,whenChanged,whenCreated,operatingSystem;"

> sScope = "subtree"

>

> sQuery = sBase&sFilter&sAttrs&sScope

> debug"ADO Query : "&sQuery

>

>

> ' set command properties

> oCommand.commandText =sQuery

> oCommand.properties("Page Size") =100 'oCommand.properties("Size

> Limit") =10000

> oCommand.properties("Timeout") =30

> oCommand.properties("Cache Results") =false

>

> ' execute command

> set oRs=oCommand.execute

>

> ' test to see if oCommand executed

> if(isNull(oRs))then

> ' do nothing, as query yielded no results

> sResult="ERR_RECORD_SET_IS_NULL"

> debug sResult

> else

> dim dn,cn,whenChanged,whenCreated,operatingSystem

> dim sProvider,sPassword,sResult

> dim oUser

>

> sPassword="aC0mpl3xP@55w0rd!"

> debug"Password : "&sPassword

> debug""

>

> log2.writeLine("Computer"&vbTab&"Status"&vbTab&"Operating System")

>

> ' check to see there are records

> if(not oRs.eOF)then

> oRs.moveFirst

>

> ' iterate record set

> while not oRs.eOF

> dn=oRs.fields(0).value

> cn=oRs.fields(1).value

> whenChanged=oRs.fields(2).value

> whenCreated=oRs.fields(3).value

> operatingSystem=oRs.fields(4).value

>

> debug"dn : "&dn

> debug vbTab&"cn : "&cn

> debug vbTab&"whenCreated : "&whenCreated

> debug vbTab&"whenChanged : "&whenChanged

> debug vbTab&"operatingSystem : "&operatingSystem

>

> if(dn<>"" and cn<>"")then

> sProvider="WinNT://"&cn&"/Administrator"

> debug vbTab&"provider : "&sProvider

>

> set oUser=getObject(sProvider)

> oUser.setPassword(sPassword)

>

> if(err.number<>0)then

> ' error thrown. assume failure

> debug vbTab&"error thrown. assume failure"

> err.clear()

> log2.writeLine(cn&vbTab&"Failure"&vbTab&operatingSystem)

> else

> ' no error thrown. assume success

> debug vbTab&"password successfully set"

> log2.writeLine(cn&vbTab&"Success"&vbTab&operatingSystem)

> end if

> end if

>

> debug""

>

> oRs.moveNext

> wend

> else

> sResult="ERR_RECORD_SET_IS_EMPTY"

> debug sResult

> end if

> end if

>

>

>

> ' ***********************************************

> ' debug(string messageToEcho)

> '

> ' Sub echos the passed string.

> '

> ' Sub used for outputting all debugging ' information to the screen/

> console.

> '

> ' bDebugFlag is a constant. Set to true for ' debugging info. Set to

> false when in ' production.

> '

> ' ***********************************************

> Private Sub debug(sMessage)

> if(bDebugFlag)then

> wscript.echo sMessage

> if(sMessage<>"")then

> logf.writeLine(date&vbTab&time&vbTab&sMessage)

> else

> logf.writeLine(sMessage)

> end if

> end if

> End Sub

>

> --

> Paul Williams

> Microsoft MVP - Windows Server - Directory Services

> http://www.msresource.net | http://forums.msresource.net

>

>

"kj" <k...@nowhere.com> wrote in message
news:ehH1JULR...@TK2MSFTNGP03.phx.gbl...

SLongxyzzy

unread,
Jan 30, 2007, 4:55:05 PM1/30/07
to
Couldn't you use rdp and open the computer management screen and change the
local passwords there? If you're real concerned, you should ensure whatever
method you choose doesn't send the passwords over the wire in clear text,
like telnet and ftp do. So easy even I could sniff them out :)


"WILDPACKET" <WILDP...@discussions.microsoft.com> wrote in message
news:D523C493-BD47-4B0E...@microsoft.com...
>

Herb Martin

unread,
Jan 30, 2007, 5:02:54 PM1/30/07
to

"kj" <k...@nowhere.com> wrote in message
news:OsfL3ZLR...@TK2MSFTNGP02.phx.gbl...

> One of these days I gotta find a better way to "file" these gems.

I like OneNote, and the new version is better (2007).


kj

unread,
Jan 30, 2007, 5:17:22 PM1/30/07
to
Good idea, Herb. I use it for keeping notes on clients now, why not start
using it for these!!

...and I just got my Office 2007 Enterprise DVD today.

--
/kj
"Herb Martin" <ne...@learnquick.com> wrote in message
news:e3UulpLR...@TK2MSFTNGP03.phx.gbl...

Herb Martin

unread,
Jan 30, 2007, 5:24:54 PM1/30/07
to

"kj" <k...@nowhere.com> wrote in message
news:%23DtytxL...@TK2MSFTNGP05.phx.gbl...

> Good idea, Herb. I use it for keeping notes on clients now, why not start
> using it for these!!
>
> ...and I just got my Office 2007 Enterprise DVD today.

It's not on all versions of Office 2007 (ugh) but is on some (I forget
which.)

I use OneNote for all sorts of categories, fun, hobbies, MCSE, Windows
in general, books, ideas, and much more.

Sometimes I also just use "Draft messages" in Outlook. Ugly but I love
the way they autosave after a few minutes.

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)


kj

unread,
Jan 30, 2007, 11:11:20 PM1/30/07
to
Enterprise, Ultimate, and Home & Student (go figure) versions I believe.
http://office.microsoft.com/en-us/onenote/FX101635841033.aspx

I need to spend more time learning and using more of Onenote's features.


--
/kj
"Herb Martin" <ne...@learnquick.com> wrote in message

news:uxrE51LR...@TK2MSFTNGP03.phx.gbl...

0 new messages