Solved

Synchronizing Local Passwords on Servers

Posted on 2013-01-09
7
140 Views
Last Modified: 2014-03-18
We have 4 servers in our DMZ that have local accounts defined.  Each server is accessed by a handful of developers.  These machines are not part of a domain just a workgroup.   When our users need to change their password on one machine, they need to change their password on the other 3 as well manually.

Is there a way for users that exists locally on each of the servers to be sync'd without the use of a domain account.

Any creative ideas or ways to help make this process more efficient?
0
Comment
Question by:rdelrosario
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 10

Expert Comment

by:convergint
ID: 38760651
Best to use a script.  See: http://www.tek-tips.com/faqs.cfm?fid=6378
0
 
LVL 13

Expert Comment

by:rhinoceros
ID: 38762021
By SysInternals Pspasswd tool...

How can I reset the local administrator password on several workstations from the command line using as few commands as possible?
http://www.windowsitpro.com/article/security/q-how-can-i-reset-the-local-administrator-password-on-several-workstations-from-the-command-line-using-as-few-commands-as-possible-
0
 

Author Comment

by:rdelrosario
ID: 38775668
I want to be able to have the end users themselves change and synchronize their passwords.  This is something admins will not be doing anymore.
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 
LVL 13

Accepted Solution

by:
rhinoceros earned 500 total points
ID: 38776796
**** P.S. You must run Pspasswd with an account that has administrative rights on the target computers. You can specify those credentials using the command-line switches -u (for the accountname) and -p (for the password).

>>>I want to be able to have the end users themselves change and synchronize their
>>>passwords

Suppose the end users are able to change the local admin password, so they should have the local administrative permission, rite?

So they can also run this command (script) by self.
0
 

Author Comment

by:rdelrosario
ID: 38778406
Having end users have the ability to run this tool in this way would allow them the ability to change anyone's password as well as administrators password as they require administrative rights to run the utility.  How can this be a viable solution.   Just as an individual has the right to change their own password, but not others, this is HUGE security risk.

I don't recommend anyone do this.  Any other ideas
0
 

Author Comment

by:rdelrosario
ID: 39936918
I've requested that this question be closed as follows:

Accepted answer: 0 points for rdelrosario's comment #a38778406

for the following reason:

no feedback
0
 

Author Closing Comment

by:rdelrosario
ID: 39936919
no comment. had to close based on no feedback
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Screen Mirroring 7 111
Connecting two servers 30 94
Auto Login Script 3 82
Auditing domain account logon attempt, failure, lockout 2 193
The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question