RE: Restricting the change of the local administrator account password.

From: Sergey V. Gordeychik (gordey_at_infosec.ru)
Date: 05/07/04

  • Next message: CHRIS GRABENSTEIN: "RE: Restricting the change of the local administrator accountpas sword." 
    Date: Fri, 7 May 2004 09:46:01 +0400
To: "Max" <maxdamage@ml1.net>, <ddraiggoch@coldyne.com>, <focus-ms@securityfocus.com>

    >I run a vb script that sets the Administrators
    >password every 30 min's regardless of what it is.
    >This task is scheduled >in a secure pc.
    >The only down side is if you don't use ipsec the password
    >would be sniffable.

    You can use scripts like that to change administrator password:
    http://www.security.nnov.ru/articles/war/

    In this case password changed via secure channel and can't be sniffed
    even without ipsec.

    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------

  • Next message: CHRIS GRABENSTEIN: "RE: Restricting the change of the local administrator accountpas sword."

    Relevant Pages

    • Re: User type
      ... This does help Mike - thanks ... > If the computer is member of domain then you should use domain user ... > After you have this account and group created you can write a short script ... > administrator and make your users local administrators. ...
      (microsoft.public.windows.server.setup)
    • Re: VBScript to verify is user is local admin
      ... I believe the script posted using WMI addresses one complication with the ... the WMI script, only reveal direct membership. ... Administrators group is renamed, ... Dim strUser ...
      (microsoft.public.scripting.vbscript)
    • Re: User type
      ... I miss-read you message - I now know that I must handle this in the startup ... >> After you have this account and group created you can write a short ... >> in local administrator and make your users local administrators. ... >> Put above command in batch file and run it as startup script (not logon ...
      (microsoft.public.windows.server.setup)
    • Re: Password Script
      ... Our script calculates a random password based on a pattern ("Cvccvc" would ... Adding randomized values and outputting the final result to a secure text ...
      (microsoft.public.windows.server.scripting)
    • Re: User type
      ... Domain Administrators group (actually you only leave it in default group -- ... Add this computer account to new domain group called e.g. ... After you have this account and group created you can write a short script ... group where your users who need to be local admins are located. ...
      (microsoft.public.windows.server.setup)