I am trying to develop a vbscript file that will run and reset the local administrator account password to one of my choosing.
Background:
1. This will be run off a logon script
2. Running on windows xp platforms
Code:
Set WshNetwork = WScript.CreateObject("WScr
ComputerName=WshNetwork.Co
NewPassword = "password"
Set objAllAcounts = GetObject("winmgmts:{imper
For Each objSystemUser in objAllAcounts
if Right(objSystemUser.SID,3)
'Reset Password
Set objUser = GetObject("WinNT://" & ComputerName & "/" & objsystemuser.name & ",user")
objUser.SetPassword(NewPas
Exit For
end if
next
This code works fine when you run it with an account with administative priveldges. With just user rights the objallaccounts impersonation works fine, but the objuser does not. I know this is because there is no impersonation on the objuser like it is on the objallacounts.
How can I impersonate the objuser? I read one of the fourms concerning this issue but it did not address an answer to the WINNT impersonation problem?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Your right, you do need runas to launch another program to do this... but that's simple... a batch file that ueses "net user" commands can do this easily
runas /user:net-admin@yourDomain
reset.bat (begin)
@echo off
REM no domain specified, local machine account is defaulted
net user administrator 123456
:end
The password must be entered in manually with this example, before reset.bat run's.
-rich
I tryied the run as but it is limited. The Code section:
if Right(objSystemUser.SID,3)
'Reset Password
Set objUser = GetObject("WinNT://" & ComputerName & "/" & objsystemuser.name & ",user")
objUser.SetPassword(NewPas
Exit For
end if
I am evaluating which account is the administrator account and grabing the name with the objUser line. The problem is that if you try this with user rights the objUser will dispaly an insufficent rights type error message.
The runas command only works if you already have the acocunt information. I am trying to gather the information and proceed to reset the password.
I found some code in Visual Basic that worked:
Private Declare Function LogonUser Lib "advapi32.dll" Alias "LogonUserA" (ByVal lpszUsername As String, ByVal lpszDomain As String, ByVal lpszPassword As String, ByVal dwLogonType As Long, ByVal dwLogonProvider As Long, phToken As Long) As Long
Private Declare Function ImpersonateLoggedOnUser Lib "advapi32.dll" (ByVal hToken As Long) As Long
Private Declare Function RevertToSelf Lib "advapi32.dll" () As Long
Private Const LOGON32_PROVIDER_DEFAULT As Long = 0&
Private Const LOGON32_PROVIDER_WINNT35 As Long = 1&
Private Const LOGON32_LOGON_INTERACTIVE As Long = 2&
Private Const LOGON32_LOGON_NETWORK As Long = 3&
Private Const LOGON32_LOGON_BATCH As Long = 4&
Private Const LOGON32_LOGON_SERVICE As Long = 5&
Public Function doLogon(ByVal strAdminUser As String, ByVal strAdminPassword As String, ByVal strAdminDomain As String) As Boolean
On Error GoTo DamnErr
Dim lngTokenHandle As Long
Dim lngLogonType As Long
Dim lngLogonProvider As Long
Dim blnResult As Boolean
lngLogonType = LOGON32_LOGON_INTERACTIVE
lngLogonProvider = LOGON32_PROVIDER_DEFAULT
blnResult = RevertToSelf()
blnResult = LogonUser(strAdminUser, strAdminDomain, strAdminPassword, _
lngLogonType, lngLogonProvider, _
lngTokenHandle)
blnResult = ImpersonateLoggedOnUser(ln
doLogon = blnResult
Exit Function
DamnErr:
Dim sERRORtxt As String
sERRORtxt = "Error Number: " & Err.Number & vbCrLf & _
"Description: " & Err.Description & vbCrLf & _
"Source: " & Err.Source & vbCrLf & _
"Function: doLogon" & vbCrLf & _
"Date: " & Now() & vbCrLf & _
"Input:" & vbCrLf & _
" strAdminUser=" & strAdminUser & vbCrLf & _
" strAdminPassword=" & strAdminPassword & vbCrLf & _
" strAdminDomain=" & strAdminDomain
App.LogEvent sERRORtxt, vbLogEventTypeError
Err.Clear
End Function
Public Function doLogoff() As Boolean
On Error GoTo DamnErr
doLogoff = RevertToSelf()
Exit Function
DamnErr:
Dim sERRORtxt As String
sERRORtxt = "Error Number: " & Err.Number & vbCrLf & _
"Description: " & Err.Description & vbCrLf & _
"Source: " & Err.Source & vbCrLf & _
"Function: doLogoff" & vbCrLf & _
"Date: " & Now()
App.LogEvent sERRORtxt, vbLogEventTypeError
Err.Clear
End Function
Call it like:
doLogon "username", "password", "domain-if-needed"
'your code that needs admin rights.
'MAKE SURE TO LOGOFF!
doLogoff
This works if you have a administrative account either in a domain or locally to use. I would still like to control it on the getobject line so I would not have to rely of any outside account elevation.
Hope this helps someone needing to use a domain account.
Awesome, if you want your points back, visit: http://www.experts-exchang
and post your intentions.
-rich
Business Accounts
Answer for Membership
by: richrumblePosted on 2004-09-27 at 07:45:08ID: 12160650
Windows has a program called RunAs, which allows you to run an App as a differnet user- so if you needed to install software that required admin priv's and your just a poweruser or lower, the runas utility allows you to do this, without have to log-off and log back on with a different account. I'm not sure how this would aid in VB, but a logon script could be used to do this- and as long an you have an account on these PC's that is in the admin's group- the reset would be quite easy.
For instance, you have all your computers joined to a domain, and by default when a PC is joined to a domain, the domain admin's group is added to the local administrator's group of the PC's. using an account in the domain admins group could easily reset any password on the local PC.
The main problem with a logon script and runas is that the password must be fed plain-text... unless you envoke a program that will obusificate the pass, and inject it into the cmd line for you. I've done this in the past, using cygwin(perl) and the runas utiltiy. if this sounds like a means to your end, I can give you the example code- but if your dead-set on VB, perhaps someone else could answer your question.
http://www.microsoft.com/w
-rich