RE: Local admin password

From: Nick Duda (nduda_at_VistaPrint.com)
Date: 06/29/05

  • Next message: Bruce Martins: "Re: DOMAIN CONTROLLER STOLEN...WHAT NEXT?"
    Date: Wed, 29 Jun 2005 12:36:46 -0400
    To: "Alexander Klimov" <alserkli@inbox.ru>, <danoli@adinet.com.uy>
    
    

    How does one propose to deploy a different password to each admin
    account on all computers in the network automatically?

    Anyone know of a script that will read a text file of computer names,
    connect to it, randomize some password using specific criteria such as 7
    chars, must use upper, lower, alpha...etc , then move on to the next
    one.

    - Nick

    -----Original Message-----
    From: Alexander Klimov [mailto:alserkli@inbox.ru]
    Sent: Wednesday, June 29, 2005 11:55 AM
    To: danoli@adinet.com.uy
    Cc: focus-ms@securityfocus.com
    Subject: Re: Local admin password

    On Tue, 28 Jun 2005 danoli@adinet.com.uy wrote:
    > One of my customers asks me how to change the password of all local
    administrators
    > of Windows XP workstations. They don?t want to go to each one and
    change
    > it because they are quite a lot and they need to put the same password
    to
    > all. Is there any tool to do this?

    Everybody have a solution to the problem, yet nobody seems to think
    a step ahead :-)

    If you use the same password for all the local admin accounts, when
    anybody with physical access to one computer and john-the-ripper has
    immediate access to all of them!

    Whatever tool you use for setting passwords make sure that you set
    *different* passwords for different hosts.

    -- 
    Regards,
    ASK
    ------------------------------------------------------------------------
    ---
    ------------------------------------------------------------------------
    ---
    ---------------------------------------------------------------------------
    ---------------------------------------------------------------------------
    

  • Next message: Bruce Martins: "Re: DOMAIN CONTROLLER STOLEN...WHAT NEXT?"

    Relevant Pages

    • Re: security log + unauthorized lgons?
      ... Dan Shallbetter typed: ... alaram system physical access is not a concern. ... I read a best practice white paper once about renaming the admin ... me against that due to other inter-dependencies the admin account ...
      (microsoft.public.windows.server.sbs)
    • Re: local admin account password
      ... What I think would be a better scheme is to set a very complex* random ... This eliminates the vulnerability created by weak admin passwords ... Do you think if someone wanted to break the local admin account they ...
      (Focus-Microsoft)
    • Re: Client Installation Issues: SMS 2.0 SP5
      ... Log on locally as LOCAL admin and install. ... Log on Locally as domain user who has LOCAL admin rights. ... The SMS Service account IS a domain admin ...
      (microsoft.public.sms.setup)
    • Re: computers locked out of the domain?
      ... Admin so that some one could work at the station. ... in the active directory' users & computers I looked at the computer account ... down or the account etc but then when I log on to the local admin acc' I can ... use the remote desktop to connect to the server, no problems & when I take ...
      (microsoft.public.windows.server.networking)
    • Re: Domain admin login problem
      ... Several Login attempt wrote: ... Administrator Account. ... How can you logon to the DC as a Local Admin? ...
      (microsoft.public.windows.server.active_directory)