Solved

Is there a inbuilt way via GPO we can reset the machines local admin passwords?

Posted on 2010-08-16
4
407 Views
Last Modified: 2012-05-10
Hi,

Is there a inbuilt way via GPO we can reset the machines local admin passwords?
A GPO setting or a addin of adm ?

Regards
Sharath
0
Comment
Question by:bsharath
4 Comments
 
LVL 3

Accepted Solution

by:
bfaruque earned 250 total points
ID: 33451396
You did not mentioned your OS. However, there's no built-in Group Policy(GPO) setting that can change the local administrator's password for you.
   
You can make it through GPP, please follow the process below:
     

 There is a Group Policy Preference (GPP) that can do it for you
 Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
Thats all.
0
 

Assisted Solution

by:dadias
dadias earned 250 total points
ID: 33451398
There's no built-in Group Policy setting that can change the local administrator's password for you.
   
However:
     

   1. There is a Group Policy Preference (GPP) that can do it for you
      Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
         
      More information:
         
         1. Introducing Group Policy Preferences
         2. Download details: Group Policy Preferences Overview
         3. Top 5 Security Settings in Group Policy for Windows Server 2008
               

          Note:
          Windows Server 2008 is not strictly needed for Group Policy Preferences.
                   

   2. You can script it
      This script will change your local Administrators passwords to the one you specify. (Note that you'll need to encrypt this one using Microsoft script encrypter if your users shouldn't be able to read it in clear text.)
           

Set WshNetwork = WScript.CreateObject("WScript.Network")
strComputer = "."
Set objUser = GetObject("WinNT://" & strComputer & "/Administrator,user")
objUser.SetPassword "NEW.PASSWORD" ' Enter new password between brackets
objUser.SetInfo

       
    Best way to use this script is  to run it using the Startup script option in a Group Policy object, since these scripts run with the credentials of the Local System account.
    Start the Group Policy snap-in, expand Computer Configuration, expand Windows Settings, click Scripts (Startup/Shutdown), and then in the right pane, add a script.

0
 
LVL 11

Author Comment

by:bsharath
ID: 33451427
Thanks
Is it the normal GPMC you are refering to?
In there i cannot see "Preferences"
0
 
LVL 4

Expert Comment

by:acstechee
ID: 33462379
Hi

You'll need to be running a Server 2008 DC at least to be able to use Group policy preferences.
IMHO group policy preferences are well worth the upgrade if you can afford it.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now