Need to reset admin password on about 200 AD machines using SCCM 2007

[TEEZLE]

We recently had a tech leave and I was granted the task to do the AD and local admin password change using SCCM 2007 (for it's reporting on the change). What's the best way to do it? I greatly appreciate the help.

 

[yinan]

You could create an SCCM job to run the net user command on every machine, but a more reliable and easier way is to use Group Policy Preferences. Makes it really easy and can be basically guarenteed to work.

 

[stash]

Gpp++

 

[daishi5]

You could create an SCCM job to run the net user command on every machine, but a more reliable and easier way is to use Group Policy Preferences. Makes it really easy and can be basically guarenteed to work.

If you don't have Group policy preferences, you can use Vbscript.

Here is a very simple script I use through AD group policy. Be warned, this script contains the local admin password. I "encode" the script before I put on the network. Microsoft has an encoding utility for these scripts, it is like encrypting, but a lot less secure. You should not leave this script on the network after you are done with it, the password can be recovered from it.

strComputer = "."
    strAdminUsername = "<insert admin account name here>"
    Set objUser = GetObject("WinNT://" & strComputer & "/" & strAdminUsername)
    objUser.SetPassword "<insert password here>"

Again, very simple script, it stores the password in plain text, and be very careful and aware of where you keep it so you can keep the password secure.

 

[TEEZLE]

Grom my understanding through GP there would be no reporting right? For some reason, my superior is stuck on the reporting part to confirm the changes. May have to convince him of the GP login.

Thanks for all your help you all 🙂

 

[stash]

You can confirm the change using RSOP from within the GPMC.

 

[rasczak]

marked for later use