RE: [ActiveDir] Rename Local Admin and Password Rest

[Gene Sibbs]

Many thanks Keith, for the pointers.

 

Other any pointers on howto change the password on a bulk basis?

Keith Duemling <[EMAIL PROTECTED]> wrote:

Gene,

 

You can rename the local admin account on systems participating in an Active Directory environment (this does not apply to systems using the Active Directory Client Extensions) through a group policy object.  The setting is located at;

 

Computer Configuration\Windows Settings\Security Settings\Local Policies/Security Options\Account -> Accounts: Rename administrator account

 

This does not however change the underlying well known SID of the account, so it can still be detected depending on how your security environment is setup, and what can be executed against the local security databases on your local machines.  This would also allow this to be effective for new machines without manual intervention.

 

I still have not found a solution I’m comfortable enough with to recommend to change the password on a bulk basis.  I’m sure others have feedback which will answer this half of the question.

 

Thanks.

Keith Duemling
 
- end -

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gene Sibbs
Sent: Monday, September 05, 2005 7:52 AM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] Rename Local Admin and Password Rest

 

I having more than two hundred workstation plugged on my company windows domain and I’d like to rename the local admin account to something like this “TechTwo” and rest the local admin password to [EMAIL PROTECTED]

 

I am thinking towards scripting to accomplish this task.  Is there a well know script I use.

 

Please point to the right direction

 

Thank you,

 

Sibbs

 

 

__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com

---

Disclaimer: This message, including attachments, is confidential and may be privileged. If you are not an intended recipient, please notify the sender immediately by return e-mail, then delete and destroy the original message and all copies. You should not copy, forward and/or disclose this message, in whole or in part, without permission of the sender.

---

Click here to donate to the Hurricane Katrina relief effort.