Re: Changing local admin password in bulk

From: Steve (
Date: 05/30/02

From: Steve <>
Date: 30 May 2002 18:18:16 GMT (Michael Rosenblum) wrote in

> I have been having problems with users finding out local
> admin passwords, and giving themselves local admin rights
> on their computers.
> I would like to know if anyone knows of a utility or an
> easy way to change the local admin password on about 300
> client machines. I am running NT 4.0 and Win2K machines,
> and all NT systems and all Windows 2000 systems have the
> same respective admin passwords.
> I do have SMS running on my network, so if someone knows a
> way to do a package through SMS, that would be great also.
> Thank you,
> Michael Rosenblum, MCSE
> Asymtek - IT Lead
> .

Hi Michael,

Your problem is actually a bit bigger than being able to
change the local admin password. You will also need to
check all other accounts on those same systems to make
sure they are not part of the local, or worse yet, domain
admin groups as a result of finding out the local admin

You might want to try a domain level login script to remove
any non-local admin user accounts from the local admin group.
Those users without local admin rights will have the
script fail, but local admins will have sufficient rights to
remove themselves! Poetic justice, don't you think?