What is the best way to change a local admin password on Macs across the entire enterprise?

Michael Wu
Michael Wu used Ask the Experts™
on
I'm looking for a good way to periodically update the password for a local admin on the Macs across the enterprise. We have a local user created as a backup in case there are issues. We want to change that password every few months in case someone gets a hold of it.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Dr. KlahnPrincipal Software Engineer

Commented:
You are using *one* password on all your systems for the administrator?

Author

Commented:
No. There are a few in use but based on OUs and Locations.
If you don't have something like JAMF, then the easiest way would be to script a password update through remote login (ssh).
Exploring SQL Server 2016: Fundamentals

Learn the fundamentals of Microsoft SQL Server, a relational database management system that stores and retrieves data when requested by other software applications.

Exec Consultant
Distinguished Expert 2018
Commented:
To manage multiple Macs I recommend some kind of MDM software such as the Profile Manager in Apple's Server software, but there are other options, like jamf that was mentioned by expert and Apple Remote Desktop. With Remote Desktop you could issue the command line to multiple machines at once. You can change the password via the command line:

dscl . -passwd /Users/(Username)

https://support.apple.com/en-sg/guide/server/apd0e2214c6/mac

Author

Commented:
Thanks. We actually use AirWatch. Jamf is much better in terms of Mac management but we have a mix of Windows and Macs. We have not had luck pushing out password change packages with AirWatch so I'm looking for other solutions. We use Desktop Authority as well for Windows machines and it works great. Too bad there isn't a similar application for Macs.
btanExec Consultant
Distinguished Expert 2018

Commented:
Chance upon past issue using AirWatch for resetting admin password so thought to share as info in case it helps. E.g  clearing the password policy policy database.

sudo pwpolicy -clearaccountpolicies

https://discussions.apple.com/thread/7041133

Author

Commented:
Thanks! I'll try this out.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial