#28220 - 2002-09-02 01:25 PM
Is it possible to change local admin password?
|
ipage
Fresh Scripter
Registered: 2002-08-31
Posts: 20
Loc: Denmark
|
I work at a company where we have 400+ pc's with about 50% NT4 and 50% Win2k Prof.
Is it possible to change the local admin password on those machines with kix?
Thnx
Jonathan
|
|
Top
|
|
|
|
#28222 - 2002-09-02 02:41 PM
Re: Is it possible to change local admin password?
|
ipage
Fresh Scripter
Registered: 2002-08-31
Posts: 20
Loc: Denmark
|
Have you tried it? Does it work for win2000 too? Is it safe to use?
I mean....we are talking about ALLOT of people here!
|
|
Top
|
|
|
|
#28225 - 2002-09-02 04:03 PM
Re: Is it possible to change local admin password?
|
ipage
Fresh Scripter
Registered: 2002-08-31
Posts: 20
Loc: Denmark
|
Hi
Thnx for your efforts, but since the reason for changing the pw is because too many people know what the old one is, it seems like a bad idea to put the new one in a place where everybody can read it...
Damn, I thought for sure that there was another possibility...
Jonathan
|
|
Top
|
|
|
|
#28226 - 2002-09-02 04:05 PM
Re: Is it possible to change local admin password?
|
Howard Bullock
KiX Supporter
   
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
checkout RenameAdmin.exe on my webpage. It can change the password and rename the local administrator account on remote computers.
You can call it from a batch file using FOR to process many computers. code:
for /f %%i in (c:\ComputerList.txt) do c:\RenameAdmin.exe \\%%i NewName NewPassword
The NewName parameter can be the old name 'administrator' if you so desire.
All activity is written to a log file. quote: Utility: RenameAdmin.exe Written by: Howard A. Bullock (habullock@comcast.net)
Copyright 2002
Renames and sets the password of the local 'administrator' account on the specified computer without knowing the original account name. Requires administrator permissions on the target computer.
LogFile = C:\Data\Scripts\RENAMEADMIN.EXE.log
2002.09.02_10.02.51 Name & Password Set (\\bullockha, Administrator, {'name' => administrator, 'password'=> #Password1})
C:\Data\Scripts>
[ 02. September 2002, 16:05: Message edited by: Howard Bullock ]
|
|
Top
|
|
|
|
#28228 - 2002-11-13 09:13 AM
Re: Is it possible to change local admin password?
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11634
Loc: Space
|
Hmmm... I'm gonna have to take a look at Howard util since it can find even if account name has been changed... but also take a look here for doing it one at a time.
I'm going to probably be doing it soon against about 1,500 systems. If they have a service account running with a given local Administrator account and password, oh well. I guess they'll have to call the Helpdesk to fix it.
Kix script to change Admin pwd on remote PC's
|
|
Top
|
|
|
|
#28229 - 2002-11-13 11:43 AM
Re: Is it possible to change local admin password?
|
MCA
KiX Supporter
   
Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
|
Dear,
As additional information about security of kixtart script. There are different methods to make your script unreadable for other. A lot of topic handles about it. A very good one is the tool kixcrypt from Richard Howarth. The related topic is F2-2560 greetings.
|
|
Top
|
|
|
|
#28230 - 2002-11-14 10:41 PM
Re: Is it possible to change local admin password?
|
NTDOC
Administrator
   
Registered: 2000-07-28
Posts: 11634
Loc: Space
|
Howards tool works quite well.
Also runs much faster then the ADSI method I tried.
Request that you support reading a list of machines from within the program Howard.
Thanks..
|
|
Top
|
|
|
|
#28231 - 2002-11-14 11:07 PM
Re: Is it possible to change local admin password?
|
pc_g0d
Fresh Scripter
Registered: 2001-11-06
Posts: 7
|
Here's the script that I use to change admin passwords. It requires the file cusrmgr.exe from the Windows 2000 Resource Kit. It is a great tool to have for scripting. You can change global and local groups, etc also!
code:
BREAK ON ;DEBUG ON ;======================== ;= Variables To Edit = ;======================== ;Username Note: This should be the local admin account of the remote PC's. $USERNAME = "administrator" ;Password Note: This should be the local admin password of the remote PC's. ;Special Note: @, %, $ are special characters. If your password contains them please type them twice in a row. ;EX: "$Test@_$" = "$$Test@@_$$" Remember, they are inforcing a password scheme now. $PWD = "yourpassword" ;Required files: cusrmgr.exe from Windows 2000 Resource Kit ;======================== ;= Do Note Edit Below = ;======================== IF OPEN (1,"PCLIST.TXT",0) = 0 $LINEINFO = READLINE(1) WHILE @ERROR = 0 ? "PCNAME: $LINEINFO" ? SHELL '%COMSPEC% /C cusrmgr -u $USERNAME -m \\$LINEINFO -P $PWD' SELECT CASE @ERROR = "0" ? "Successful" SHELL "%COMSPEC% /C echo $LINEINFO,Success>> admin_log.csv" CASE @ERROR = "53" ? "No PC Found" SHELL "%COMSPEC% /C echo $LINEINFO,No PC Found>> admin_log.csv" CASE @ERROR = "5" ? "Access Denied" SHELL "%COMSPEC% /C echo $LINEINFO,Access Denied>> admin_log.csv" CASE @ERROR = "2245" ? "Invalid Password" SHELL "%COMSPEC% /C echo $LINEINFO,Invalid Password>> admin_log.csv" CASE 1 ? "Weird Error" SHELL "%COMSPEC% /C echo $LINEINFO,Weird Error>> admin_log.csv" ENDSELECT $LINEINFO = READLINE(1) ? LOOP $RC = CLOSE (1) ELSE EXIT 0 ENDIF EXIT 0
I use it all the time. Hope it helps you!
_________________________
Move out of my way or I'll replace you with a kix script.
|
|
Top
|
|
|
|
#28233 - 2002-11-15 12:38 AM
Re: Is it possible to change local admin password?
|
Howard Bullock
KiX Supporter
   
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
NTDOC, I can also provide a utility that will change the account and password used for a service if you need that.
|
|
Top
|
|
|
|
#28235 - 2002-12-04 06:04 PM
Re: Is it possible to change local admin password?
|
MCA
KiX Supporter
   
Registered: 2000-04-28
Posts: 5152
Loc: Netherlands, EU
|
Dear Howard,
We think also other guys like that. greetings.
|
|
Top
|
|
|
|
#28236 - 2002-12-04 06:24 PM
Re: Is it possible to change local admin password?
|
Howard Bullock
KiX Supporter
   
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
I will put this on my todo list. Should this functionality to configure services be part of Win32Admin.DLL or a standalone EXE (or both?) [ 04. December 2002, 18:24: Message edited by: Howard Bullock ]
|
|
Top
|
|
|
|
Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart
|
0 registered
and 756 anonymous users online.
|
|
|