Local Admin Password change

Posted on 2011-05-12
Last Modified: 2012-06-21

We are using Windows Server 2003 Domain controllers. I wish to change the Administrator password on all workstations in our domain. I am using one VB Script for that. I configured this script as a startup script using GPO. I put the script in SYSVOL share and configured the GPO. At this point of time the GPO applied successfully and the password changed accordingly.

But When I changed the script from SYSVOL and Kept in our file server share and I had configured the GPO accordingly. I had given the permissions on that file share to System, Authenticated users, Everyone to full access.The file share is accessible to all our workstations. Now the GPO is getting applied but it is not giving the exact result. In the event viewer I am observing lot of errors "Could not execute the following script \\\Logonscripts\LAUANDPWD.vbe. Access is denied". I had given all the required rights on the folder. Please suggest me how to resolve this error.

Please find the Script and Error as attachments.

Thanks in advance.
 Script.txt Error screen shot
Question by:gaddam01
    LVL 6

    Accepted Solution

    LVL 9

    Expert Comment

    try to set Share and NTFS (Security) permissions with Everyone Full Controll

    Author Comment

    The share and permissions are already given for Everyone with full control.
    LVL 21

    Expert Comment

    by:Joseph Moody
    Why not use group policy preferences to manage local password? It is designed to do that and is super easy to set up!
    LVL 4

    Expert Comment

    1 - Start  ProcessMonitor , run the script manually and check system activity.
    2 - If it worked in sysvol folder, why change it to another folder ?
    LVL 1

    Expert Comment

    Depends on how many users but you can get rid of the script and manually change the password from Users and computers.

    The put script back in SYSVOL again

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    [b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now