Script for finding blank local admin passwords

Guys...I need to investigate the workstations (Windows 2000/XP) which have been doled out to the users without assigning a passsword to Local administrator account.

Bereft of SMS or any such tool, I guess it's not going to be an easy job.

Anyone, got any script to run for such an invetigative procedure throughout my LAN?
Petrofac_ITlogmeinAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
PowerITCommented:
If those machines are member of an Active Directory Domain then you can scan them with MBSA (Microsoft Baseline Security Analyzer). MBSA does not flag empty passwords on empty local passwords when the machines are in a workgroup, so hopefully you are in a domain.

http://www.microsoft.com/technet/security/tools/mbsa2/default.mspx

J.
0
 
PowerITCommented:
Oops, serious type. The second sentence should have read:
MBSA does not flag empty local passwords when the machines are in a workgroup, so hopefully you are in a domain.


J.
0
 
Petrofac_ITlogmeinAuthor Commented:
Thanks PowerIT, this is nice! Yes..the machines are part of an AD domain.
Related...can I also assign a password to local admin account, if found empty, using some utility or I'll have to visit the PCs physical location?
0
 
bsharathConnect With a Mentor Commented:
Ok here are some methods to chage the local admin password...
Use this as the login script.This even delivers reports on whose machines passwords have been changed.

@ECHO OFF
ECHO %COMPUTERNAME% >>\\Machinename\Foldername\PwdChangeStatus.txt
NET USER Administrator Newpasswordhere >>\\Machinename\Foldername\PwdChangeStatus.txt
ECHO. >>\\indiasophos\ps\PwdChangeStatus.txt
EXIT /B /0
Use this software to change the passwords of all machines in the Domain or in the file.
Download DC-PasswordChanger (DCPC)
http://www.danish-company.com/dcpc

Note **** Make sure not to select all machines in the Domain as this includes changing the Dc's Domain controllers passwords also then you may be having issues with the Domain\administrator logins.

Hope this helps.
0
All Courses

From novice to tech pro — start learning today.