?
Solved

Is there a inbuilt way via GPO we can reset the machines local admin passwords?

Posted on 2010-08-16
4
Medium Priority
?
415 Views
Last Modified: 2012-05-10
Hi,

Is there a inbuilt way via GPO we can reset the machines local admin passwords?
A GPO setting or a addin of adm ?

Regards
Sharath
0
Comment
Question by:bsharath
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 3

Accepted Solution

by:
bfaruque earned 1000 total points
ID: 33451396
You did not mentioned your OS. However, there's no built-in Group Policy(GPO) setting that can change the local administrator's password for you.
   
You can make it through GPP, please follow the process below:
     

 There is a Group Policy Preference (GPP) that can do it for you
 Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
Thats all.
0
 

Assisted Solution

by:dadias
dadias earned 1000 total points
ID: 33451398
There's no built-in Group Policy setting that can change the local administrator's password for you.
   
However:
     

   1. There is a Group Policy Preference (GPP) that can do it for you
      Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
         
      More information:
         
         1. Introducing Group Policy Preferences
         2. Download details: Group Policy Preferences Overview
         3. Top 5 Security Settings in Group Policy for Windows Server 2008
               

          Note:
          Windows Server 2008 is not strictly needed for Group Policy Preferences.
                   

   2. You can script it
      This script will change your local Administrators passwords to the one you specify. (Note that you'll need to encrypt this one using Microsoft script encrypter if your users shouldn't be able to read it in clear text.)
           

Set WshNetwork = WScript.CreateObject("WScript.Network")
strComputer = "."
Set objUser = GetObject("WinNT://" & strComputer & "/Administrator,user")
objUser.SetPassword "NEW.PASSWORD" ' Enter new password between brackets
objUser.SetInfo

       
    Best way to use this script is  to run it using the Startup script option in a Group Policy object, since these scripts run with the credentials of the Local System account.
    Start the Group Policy snap-in, expand Computer Configuration, expand Windows Settings, click Scripts (Startup/Shutdown), and then in the right pane, add a script.

0
 
LVL 11

Author Comment

by:bsharath
ID: 33451427
Thanks
Is it the normal GPMC you are refering to?
In there i cannot see "Preferences"
0
 
LVL 4

Expert Comment

by:acstechee
ID: 33462379
Hi

You'll need to be running a Server 2008 DC at least to be able to use Group policy preferences.
IMHO group policy preferences are well worth the upgrade if you can afford it.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
Here's a look at newsworthy articles and community happenings during the last month.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question