Home > Ask the Security Experts > Questions & Answers > Changing local admin passwords easily
Ask The Security Expert: Questions & Answers
EMAIL THIS

Changing local admin passwords easily

Joel Johnson EXPERT RESPONSE FROM: Joel Johnson

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 29 April 2002
A generally accepted security practice is to make passwords expire. With 1,000 computers to manage, is there a way to change 'local' administrator passwords easily? The local administrator is needed for computers that are malfunctioning and cannot access the network, so we do not want this account password to expire before it can be changed.


>

There are several ways of doing this. You can spend hours of your time creating a batch, WSH or VB script that searches for all the variables needed to change the local admin password on your network, or you can save time and effort by using the utility call cryptpwd.exe provided in the NT and 2000 Resource kits. I recommend using the cryptpwd.exe approach unless you want to impress your boss with your scripting abilities.

Here is how you can use cryptpwd.exe to change the entire domain's local admin accounts. First you need to create a simple text file with the list of computers you wish to change (you can get a list of the computers in your domain from server manager or active directory if you are using Windows 2000). Next, you need to create a simple batch file and add the following line:

For /F %%x in (sampletext.txt) do cryptpwd - m %%x -P changedpass

Substitute "sampletext.txt" with the name of the text file you created and changedpass with the new password you wish to use. Save the batch file, the text file and the cryptpwd.exe file in the same directory and you are ready to change you company's local admin passwords. You can run this from an account that has domain admin rights or you can get creative and put this in a login script. I prefer to run it from my desktop. Cryptpwd also provides you with additional switches you can use to change the local admin username as well.


For more information on this topic, visit these other SearchSecurity resources:
Best Web Links: Securing Microsoft applications
Best Web Links: Passwords


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary



Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
Browse our Expert Advice



Find Security Solutions for Your Business
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts