Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

blank local passwords

Posted on 2014-12-09
6
Medium Priority
?
122 Views
Last Modified: 2015-01-03
Is there a GPO in server 2008 that I can use to remove any LOCAL user accounts with blank passwords or at a minimum give that account a password??


Please advise
0
Comment
Question by:Rbbedz1
  • 3
  • 2
6 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 2000 total points
ID: 40489442
You can very easily limit local accounts with blank passwords so that they can only log in at the console... no network access.  Does that help?

Otherwise, I think could probably define a startup script to find local accounts with blank passwords, and disable them.
0
 
LVL 57

Expert Comment

by:McKnife
ID: 40489810
That script would do. But if we think of lazy local admins that simply re-enable the account and leave the password blank, you should add a password policy to your domain (which effectively works for local accounts, too). Then you could use another neat function that sets at least an 8-char-random password. You would apply that command to the usernames you found.
net user username /random

There are also powershell scripts that can set long random passwords, I could provide one if you need.
0
 

Author Comment

by:Rbbedz1
ID: 40490041
I already have the limit local accounts with blank passwords so that they can only log in at the console... enabled
and I have a domain acct password policy in effect

What I was hoping to do was search for local accounts that have been setup and possibly with blank password.  I want to make sure that there are no local accts with blank passwords and change if there is

if you can send the ps script with instructions on how to run/use that would be greatly appreciated.

rbbedz1
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 

Author Comment

by:Rbbedz1
ID: 40490044
tell me more about this "should add a password policy to your domain (which effectively works for local accounts, too). Then you could use another neat function that sets at least an 8-char-random password. You would apply that command to the usernames you found.
 net user username /random"


this sounds very intriguing..
0
 
LVL 57

Expert Comment

by:McKnife
ID: 40490085
"What I was hoping to do was search for local accounts that have been setup and possibly with blank password" - ...and that is exactly what Razmus provided. That script, did you try it?

Will come with more, soon.
0
 
LVL 57

Expert Comment

by:McKnife
ID: 40490331
0

Featured Post

[Webinar] Cloud and Mobile-First Strategy

Maybe you’ve fully adopted the cloud since the beginning. Or maybe you started with on-prem resources but are pursuing a “cloud and mobile first” strategy. Getting to that end state has its challenges. Discover how to build out a 100% cloud and mobile IT strategy in this webinar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
Security measures require Windows be logged in using Standard User login (not Administrator).  Yet, sometimes an application has to be run “As Administrator” from a Standard User login.  This paper describes how to create a shortcut icon to launch a…
In a question here at Experts Exchange (https://www.experts-exchange.com/questions/29062564/Adobe-acrobat-reader-DC.html), a member asked how to create a signature in Adobe Acrobat Reader DC (the free Reader product, not the paid, full Acrobat produ…
Loops Section Overview
Suggested Courses
Course of the Month13 days, 13 hours left to enroll

963 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question