Re: Changing local admin PW using vb logon script - can it be encrypted?

i'm using this - http://www.sysinternals.com/Utilities/PsPasswd.html

The problem is: white the same password in all machines

i recommend to apply different passwords in groups, enumerating via script logon (if necessary, u can use sanur - www.commandline.co.uk/sanur/)

[]'s!

Ivan "Doomer" Carlos
Network Admin & Security
Social Engineering Specialist
Cell.: +55 (11) 8112-0666
--
AIM / Gizmo / GTalk / Skype / Y!M: ivandoomer
E-mail / MSN: icarlos@xxxxxxxxxxx
WebSite: www.icarlos.net
--
Hacking: http://hacking.doomer.ws
--------------------------------------------------


----- Original Message ----- From: <tth8@xxxxxxxxxxx>
To: <focus-ms@xxxxxxxxxxxxxxxxx>
Sent: Thursday, December 01, 2005 3:02 PM
Subject: Changing local admin PW using vb logon script - can it be encrypted?


Hi all,

Long time lurker, first time poster. We have roughly 500 computers that we'd like to change the local admin passwords on. We realize the security risks of having 1 password on all of our computers and are willing to assume that risk. We've developed a VB script that we can implement as a logon script that works perfectly to change the password. We do not want this script sent along as clear text if we can avoid it. Is there any way we can encrypt this script?

We've looked at options such as using Windows permissions to either deny Domain Users access (preventing anyone from reading the script) or allowing only Domain Computers Read Only access.however I think that if you are logged into a local computer you should be able to read the script. Not to mention, if you could capture the packets, you could easily find the script and its contents so permissions would matter at all in that scenario.

Any help and/or insight is greatly appreciated.

Best,
.tom

---------------------------------------------------------------------------
---------------------------------------------------------------------------





---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • Re: Std Users, Update Files?
    ... In order for it to work I had to add the "Computers" into my security groups which I use to divide my remote sites by office, would this be right or is there a better way to do it? ... If you apply it under computer configuration, windows settings, scripts, startup the script will run with system permissions, which are the highest and will execute without any password. ... Normally I use xcopy to copy files from a network share to the ... all the users were setup with Admin rights, ...
    (microsoft.public.windows.server.general)
  • Re: Automating FTP transfers
    ... the passwords is added to the script just before it ... * To join/leave the list, search archives, change list settings, * ... Authorised and regulated by the Financial Services Authority. ...
    (comp.sys.hp.mpe)
  • Re: Change all my Local Admin passwords automatically...
    ... You can use the command "net user username new password" in a batch file to ... run as a "startup" script for a group of computers in an Organizational Unit ... You can use Computer Management to change passwords on ...
    (microsoft.public.win2000.security)
  • Re: Change all my Local Admin passwords automatically...
    ... You can use the command "net user username new password" in a batch file to ... run as a "startup" script for a group of computers in an Organizational Unit ... You can use Computer Management to change passwords on ...
    (microsoft.public.win2000.security)
  • RE: Local Admins
    ... Write a Perl script to handle it. ... change the passwords of local admins, ... when any new member is added to one of these groups. ... when someone in our group questioned whether we'd be sending passwords ...
    (Focus-Microsoft)