Solved

blank local passwords

Posted on 2014-12-09
6
112 Views
Last Modified: 2015-01-03
Is there a GPO in server 2008 that I can use to remove any LOCAL user accounts with blank passwords or at a minimum give that account a password??


Please advise
0
Comment
Question by:Rbbedz1
  • 3
  • 2
6 Comments
 
LVL 30

Accepted Solution

by:
Rich Weissler earned 500 total points
ID: 40489442
You can very easily limit local accounts with blank passwords so that they can only log in at the console... no network access.  Does that help?

Otherwise, I think could probably define a startup script to find local accounts with blank passwords, and disable them.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40489810
That script would do. But if we think of lazy local admins that simply re-enable the account and leave the password blank, you should add a password policy to your domain (which effectively works for local accounts, too). Then you could use another neat function that sets at least an 8-char-random password. You would apply that command to the usernames you found.
net user username /random

There are also powershell scripts that can set long random passwords, I could provide one if you need.
0
 

Author Comment

by:Rbbedz1
ID: 40490041
I already have the limit local accounts with blank passwords so that they can only log in at the console... enabled
and I have a domain acct password policy in effect

What I was hoping to do was search for local accounts that have been setup and possibly with blank password.  I want to make sure that there are no local accts with blank passwords and change if there is

if you can send the ps script with instructions on how to run/use that would be greatly appreciated.

rbbedz1
0
The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

 

Author Comment

by:Rbbedz1
ID: 40490044
tell me more about this "should add a password policy to your domain (which effectively works for local accounts, too). Then you could use another neat function that sets at least an 8-char-random password. You would apply that command to the usernames you found.
 net user username /random"


this sounds very intriguing..
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40490085
"What I was hoping to do was search for local accounts that have been setup and possibly with blank password" - ...and that is exactly what Razmus provided. That script, did you try it?

Will come with more, soon.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 40490331
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many people tend to confuse the function of a virus with the one of adware, this misunderstanding of the basic of what each software is and how it operates causes users and organizations to take the wrong security measures that would protect them ag…
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question