Guy's not sure if this has been posted before, today my depute rector told me he gave the local admin password to a computing teacher "who knows erm ... shall we say flip all about computers" and with his little knowledge he is a pain in the ass.
So i searched the net for hours and came across this freeware tool. When logged on to a machine with the local admin account i installed this tool and re-set the local admin password for every machine in the school that was turned on!
Avian Waves : Tech : Tools : XS BAP < Hope you find this usefull, especialy those who like me tried doing this with login scripts and gpo's.
Which one did you use (that presumably worked nicely)? v1 or the v2 beta?
I used v1 and it work perfectly! Even thought "this is too good to be true" and went to several rooms and got "wrong username or password" when trying to log in with the old account password. works a treat!
If you want to do it with a startup script then this works:
- it will set a 20 character, random password (mix of chars from ASCII 32 to ASCII 126)Code:set oShell=createobject("wscript.shell") sPassword="" for i=1 to 20 sPassword=sPassword & chr(rnd()*96+32) next sCmd="net user administrator " & sPassword oShell.run sCmd
If you actually need to log on as local admin and you still have domain access then from another machine you can reset the password (eg with psexec
or you can just use a password reset disc if the machine has lost domain accessCode:psexec \\computername net user administrator NewSecretPassword
You could extend the script above so that it writes the password it chose to a database somewhere but how often do you actually need local admin access?
I need local admin access quite a bit, still setting up a new school so everyday I log in as local admin at some time.
Thankyou very much one of the things on my todo list was changing all the local passwords was about to write a script todo it :P
joe90bass (18th December 2008)
ahh thanks for that AngryTech although some of us arn't on server 2008 yet.... although hopefully wont be long although i'll admit the test run i did of 2008 got abit annoyed at allot of bits but thats just me being anti vista
The nicest bit is that you don't need to be running 2008 or Vista on your domain to use GPP.
Once you have the CSE installed on your clients (there is a CSE for XP and 2003, and it deploys through Windows Update/WSUS), all you need is a single Vista or 2008 machine to configure the preferences. I've used it in an entirely 2003-controlled domain by configuring it from my Vista laptop - which isn't joined to the domain.
Yep, found out that GPP issupported on XP on a 2008 AD course I went on recently. I'm actually planning on pushing the CSE out via WSUS tomorrow
There are currently 1 users browsing this thread. (0 members and 1 guests)