Solved

Synchronizing Local Passwords on Servers

Posted on 2013-01-09
7
141 Views
Last Modified: 2014-03-18
We have 4 servers in our DMZ that have local accounts defined.  Each server is accessed by a handful of developers.  These machines are not part of a domain just a workgroup.   When our users need to change their password on one machine, they need to change their password on the other 3 as well manually.

Is there a way for users that exists locally on each of the servers to be sync'd without the use of a domain account.

Any creative ideas or ways to help make this process more efficient?
0
Comment
Question by:rdelrosario
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
7 Comments
 
LVL 10

Expert Comment

by:convergint
ID: 38760651
Best to use a script.  See: http://www.tek-tips.com/faqs.cfm?fid=6378
0
 
LVL 13

Expert Comment

by:rhinoceros
ID: 38762021
By SysInternals Pspasswd tool...

How can I reset the local administrator password on several workstations from the command line using as few commands as possible?
http://www.windowsitpro.com/article/security/q-how-can-i-reset-the-local-administrator-password-on-several-workstations-from-the-command-line-using-as-few-commands-as-possible-
0
 

Author Comment

by:rdelrosario
ID: 38775668
I want to be able to have the end users themselves change and synchronize their passwords.  This is something admins will not be doing anymore.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 13

Accepted Solution

by:
rhinoceros earned 500 total points
ID: 38776796
**** P.S. You must run Pspasswd with an account that has administrative rights on the target computers. You can specify those credentials using the command-line switches -u (for the accountname) and -p (for the password).

>>>I want to be able to have the end users themselves change and synchronize their
>>>passwords

Suppose the end users are able to change the local admin password, so they should have the local administrative permission, rite?

So they can also run this command (script) by self.
0
 

Author Comment

by:rdelrosario
ID: 38778406
Having end users have the ability to run this tool in this way would allow them the ability to change anyone's password as well as administrators password as they require administrative rights to run the utility.  How can this be a viable solution.   Just as an individual has the right to change their own password, but not others, this is HUGE security risk.

I don't recommend anyone do this.  Any other ideas
0
 

Author Comment

by:rdelrosario
ID: 39936918
I've requested that this question be closed as follows:

Accepted answer: 0 points for rdelrosario's comment #a38778406

for the following reason:

no feedback
0
 

Author Closing Comment

by:rdelrosario
ID: 39936919
no comment. had to close based on no feedback
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Organizations create, modify, and maintain huge amounts of data to help their businesses earn money and generally function.  Typically every network user within an organization has a bit of disk space to store in process items and personal files.   …
I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question