Revolving Passwords for WinXP?

[imported_TopCat]

I'm wondering if there is a way to set up a server than can revolve Windows passwords, particularly over a domain. Currently, at work we are running into the inconveniences of having to go around to each Windows machine and manually change the Admin passwords every so often. I'm sure there are ways to mitigate this inconvenience, but I'm not the biggest Windows buff so I can't think of any.

Any help is appreciated.

 

[Smilin]

Answer:
http://support.microsoft.com/kb/272530

See also:
http://www.microsoft.com/technet/securi...ty/administratoraccounts/aapgch03.mspx

edit..and perhaps:
http://www.microsoft.com/technet/scriptcenter/resources/qanda/oct04/hey1015.mspx

 

[imported_TopCat]

Thank you very much. I'll try those methods out.

 

[nweaver]

Change...the local admin passwords? Disable the accounts/make it extremely complex and write it down. I woudln't think you would need it very often, since you have admin rights as a reqular domain admin.

 

[Smilin]

can't disable those accounts. rename and drop a fake admin account is a best practice though. See that 2nd. link above.

 

[spyordie007]

Well, you can disable them when windows is booted normally; but all that has to be done is to reboot in safe mode and the account is activated.

Also be careful using client-side scripts to reset the password, the local system needs the password in the clear in order to perform the reset.

I've used products such as LAPM (http://www.foghornsecurity.com/lapm/) and run a server that performs the resets; that way they are all random, all complex, and still recoverable by the right people.

Erik

 

[SoulAssassin]

Originally posted by: nweaver
Change...the local admin passwords? Disable the accounts/make it extremely complex and write it down. I woudln't think you would need it very often, since you have admin rights as a reqular domain admin.

and when he has a problem and is unable to authenticate with the domain? A reasonably complex password and renaming are valid solutions 99% of the time.