Using Deployment Solution to Reset Local User Account Passwords
Updated: 07 Jul 2008 | 4 comments
Resetting a local user account on one or more computers on your network, whether they are in a domain or workgroup, using Altiris Deployment Solution is very simple.
Making use of Micrsoft's commands to create a script that will do this for you.
Here's how:
- Create a new "Run Script Job" in your DS console.
- Run this script:
net user 'account' 'password'
(do not use the inverted commas, but replace the content inside with the account and password that you need)
- Drag and drop this job on the selected computers of your choice in DS console.
- Password is now changed.
For more comments on how to do this see the knowledgebase article on Microsoft KB Site: Article ID: 251394
blog entry Filed Under:
About Endpoint Management Community Blog
The Endpoint Management Community Blog is the perfect place to share short, timely insights including product tips, news and other information relevant to the Endpoint Management community. Any authenticated Connect member can contribute to this blog. Filter by:
Blog Tags
Configuring Altiris Client Management Suite Altiris Deployment Solution Symantec Management Platform (Notification Server) Wise Packaging Basics Altiris Server Management Suite Best Practice Compatibility Tip/How to Helpdesk Solution Altiris IT Asset Management Installing Workflow Solution Ghost Solution Suite Windows Reporting Performance Upgrade Features ServiceDesk 7.x Database Agents Dell Management Products
Comments
The Local Security Solution does this as well
If I remember correctly, this feature is built into the LSS.
But since this is a separate product that you would have to purchase, then this solution is the next best way to do that.
I have implemented this in my imaging process where I set the password because my image has no password on the administrator account at first.
Changing local password
I came up with a little VB script that you can use to change any local password. Just insert your info and run the script on the computer (s) you want to change.
strComputer = "." Set objUser = GetObject("WinNT://" & strComputer & "/***put the user name here***, user") objUser.SetPassword "****put your new password here***" objUser.SetInfoThis is the exact script
This is the exact script that we use when we need to reset a password, it works wonderfully just edit the file script and run it against a PC, and you're done.
It came in handy after some users were able to change the local admin password.
Here is something else you can do
Along the lines of the comments made by setral, if they can change the local admin password, it is likely they could remove the Domain Admins group from the local Administrators group (I have had this happen to me).
So I did some digging and found the lines you could add to this script to add domain accounts or groups into the group.
Here is the code:
Set objGroup = GetObject("WinNT://" & strComputer & "/Administrators") Set objUser = GetObject("WinNT://insert your domain/insert group to add") objGroup.Add(objUser.ADsPath)Works like a champ.
Would you like to reply?
Login or Register to post your comment.