Solved

Is there a inbuilt way via GPO we can reset the machines local admin passwords?

Posted on 2010-08-16
4
410 Views
Last Modified: 2012-05-10
Hi,

Is there a inbuilt way via GPO we can reset the machines local admin passwords?
A GPO setting or a addin of adm ?

Regards
Sharath
0
Comment
Question by:bsharath
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 3

Accepted Solution

by:
bfaruque earned 250 total points
ID: 33451396
You did not mentioned your OS. However, there's no built-in Group Policy(GPO) setting that can change the local administrator's password for you.
   
You can make it through GPP, please follow the process below:
     

 There is a Group Policy Preference (GPP) that can do it for you
 Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
Thats all.
0
 

Assisted Solution

by:dadias
dadias earned 250 total points
ID: 33451398
There's no built-in Group Policy setting that can change the local administrator's password for you.
   
However:
     

   1. There is a Group Policy Preference (GPP) that can do it for you
      Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
         
      More information:
         
         1. Introducing Group Policy Preferences
         2. Download details: Group Policy Preferences Overview
         3. Top 5 Security Settings in Group Policy for Windows Server 2008
               

          Note:
          Windows Server 2008 is not strictly needed for Group Policy Preferences.
                   

   2. You can script it
      This script will change your local Administrators passwords to the one you specify. (Note that you'll need to encrypt this one using Microsoft script encrypter if your users shouldn't be able to read it in clear text.)
           

Set WshNetwork = WScript.CreateObject("WScript.Network")
strComputer = "."
Set objUser = GetObject("WinNT://" & strComputer & "/Administrator,user")
objUser.SetPassword "NEW.PASSWORD" ' Enter new password between brackets
objUser.SetInfo

       
    Best way to use this script is  to run it using the Startup script option in a Group Policy object, since these scripts run with the credentials of the Local System account.
    Start the Group Policy snap-in, expand Computer Configuration, expand Windows Settings, click Scripts (Startup/Shutdown), and then in the right pane, add a script.

0
 
LVL 11

Author Comment

by:bsharath
ID: 33451427
Thanks
Is it the normal GPMC you are refering to?
In there i cannot see "Preferences"
0
 
LVL 4

Expert Comment

by:acstechee
ID: 33462379
Hi

You'll need to be running a Server 2008 DC at least to be able to use Group policy preferences.
IMHO group policy preferences are well worth the upgrade if you can afford it.
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Installing 2012 R2 and making it a domain controller 6 41
Time server on domain 3 60
Pop-up allow list 6 40
DHCP 50/50 Split Scope seems to favor 1 group 2 46
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question