Dataspike,
If you're using GPO to run this script to set the local admin password on the workstations, why not just use a GPO to set the workstation's local admin password directly?
If you can't use policy for whatever reason, the Secure Admin Install Suite can do this for you without exposing any credentials.. look in the Script Vault here on KORG.
Another option is to encrypt the password in an external file, and decrypt it in the script, which is tokenized. The CYPHER() UDF can be found here on KORG and downloaded from my web site from that page. It's pre-tokenized to insure the security, so needs to be loaded into your scripts via a CALL statement. It's a cross between the WW-II Germam Inigma code, updated from 8 to 2048 codewheels, and a code used by an episode of Mission: Impossible in 1968. The cool thing about this is you can't crack the code based on character frequency - with the right key, something like "cat" can be written as "GGG".
Glenn
_________________________
Actually I
am a Rocket Scientist!