Solved

Is there a inbuilt way via GPO we can reset the machines local admin passwords?

Posted on 2010-08-16
4
406 Views
Last Modified: 2012-05-10
Hi,

Is there a inbuilt way via GPO we can reset the machines local admin passwords?
A GPO setting or a addin of adm ?

Regards
Sharath
0
Comment
Question by:bsharath
4 Comments
 
LVL 3

Accepted Solution

by:
bfaruque earned 250 total points
Comment Utility
You did not mentioned your OS. However, there's no built-in Group Policy(GPO) setting that can change the local administrator's password for you.
   
You can make it through GPP, please follow the process below:
     

 There is a Group Policy Preference (GPP) that can do it for you
 Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
Thats all.
0
 

Assisted Solution

by:dadias
dadias earned 250 total points
Comment Utility
There's no built-in Group Policy setting that can change the local administrator's password for you.
   
However:
     

   1. There is a Group Policy Preference (GPP) that can do it for you
      Changing the local Administrator password on domain members has become pretty easy with the advent of Group Policy Preferences.
         
      Start the Group Policy snap-in, expand Computer Configuration, expand Preferences, click Control Panel, and then right-click Local Users and Groups. From the menu select New - Local User.  Select Update as the action, type Administrator into the User name text box, then type the new password into the Password text box, confirming the password in Confirm Password text box. Press OK.
         
      More information:
         
         1. Introducing Group Policy Preferences
         2. Download details: Group Policy Preferences Overview
         3. Top 5 Security Settings in Group Policy for Windows Server 2008
               

          Note:
          Windows Server 2008 is not strictly needed for Group Policy Preferences.
                   

   2. You can script it
      This script will change your local Administrators passwords to the one you specify. (Note that you'll need to encrypt this one using Microsoft script encrypter if your users shouldn't be able to read it in clear text.)
           

Set WshNetwork = WScript.CreateObject("WScript.Network")
strComputer = "."
Set objUser = GetObject("WinNT://" & strComputer & "/Administrator,user")
objUser.SetPassword "NEW.PASSWORD" ' Enter new password between brackets
objUser.SetInfo

       
    Best way to use this script is  to run it using the Startup script option in a Group Policy object, since these scripts run with the credentials of the Local System account.
    Start the Group Policy snap-in, expand Computer Configuration, expand Windows Settings, click Scripts (Startup/Shutdown), and then in the right pane, add a script.

0
 
LVL 11

Author Comment

by:bsharath
Comment Utility
Thanks
Is it the normal GPMC you are refering to?
In there i cannot see "Preferences"
0
 
LVL 4

Expert Comment

by:acstechee
Comment Utility
Hi

You'll need to be running a Server 2008 DC at least to be able to use Group policy preferences.
IMHO group policy preferences are well worth the upgrade if you can afford it.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now