local admin account re-set remotely BULK

[Gavinc]

Guy's not sure if this has been posted before, today my depute rector told me he gave the local admin password to a computing teacher "who knows erm ... shall we say flip all about computers" and with his little knowledge he is a pain in the ass.

 

So i searched the net for hours and came across this freeware tool. When logged on to a machine with the local admin account i installed this tool and re-set the local admin password for every machine in the school that was turned on!

 

Avian Waves : Tech : Tools : XS BAP < Hope you find this usefull, especialy those who like me tried doing this with login scripts and gpo's.

 

 

Cheers

 

Gavin

[PiqueABoo]

Which one did you use (that presumably worked nicely)? v1 or the v2 beta?

[Gavinc]

I used v1 and it work perfectly! Even thought "this is too good to be true" and went to several rooms and got "wrong username or password" when trying to log in with the old account password. works a treat!

[laserblazer]

a computing teacher "who knows erm ... shall we say flip all about computers" and with his little knowledge he is a pain in the ass.

 

 

Isn't that part of their job description?

[srochford]

If you want to do it with a startup script then this works:

 

set oShell=createobject("wscript.shell")
sPassword=""
for i=1 to 20
 sPassword=sPassword & chr(rnd()*96+32)
next
sCmd="net user administrator " & sPassword
oShell.run sCmd

 

- it will set a 20 character, random password (mix of chars from ASCII 32 to ASCII 126)

 

If you actually need to log on as local admin and you still have domain access then from another machine you can reset the password (eg with psexec:)

psexec \\computername net user administrator NewSecretPassword

or you can just use a password reset disc if the machine has lost domain access

 

You could extend the script above so that it writes the password it chose to a database somewhere but how often do you actually need local admin access?

[Gavinc]

I need local admin access quite a bit, still setting up a new school so everyday I log in as local admin at some time.

[Azhibberd]

Thankyou very much one of the things on my todo list was changing all the local passwords was about to write a script todo it

 

Cheers

[AngryTechnician]

Just as a heads-up, you can do this with Group Policy Preferences too. Possibly the most useful thing to come out of Vista/Server 2008 and amusingly it was something Microsoft bought in...

[Azhibberd]

ahh thanks for that AngryTech although some of us arn't on server 2008 yet.... although hopefully wont be long although i'll admit the test run i did of 2008 got abit annoyed at allot of bits but thats just me being anti vista

[joe90bass]

Just as a heads-up, you can do this with Group Policy Preferences too. Possibly the most useful thing to come out of Vista/Server 2008 and amusingly it was something Microsoft bought in...

 

Been using 2k8 for a while now and hadn't noticed that. Thanks!

[AngryTechnician]

The nicest bit is that you don't need to be running 2008 or Vista on your domain to use GPP.

 

Once you have the CSE installed on your clients (there is a CSE for XP and 2003, and it deploys through Windows Update/WSUS), all you need is a single Vista or 2008 machine to configure the preferences. I've used it in an entirely 2003-controlled domain by configuring it from my Vista laptop - which isn't joined to the domain.

[joe90bass]

Yep, found out that GPP issupported on XP on a 2008 AD course I went on recently. I'm actually planning on pushing the CSE out via WSUS tomorrow